CVE-2006-3748

CVE-2006-3748 describes a remote file inclusion vulnerability in the LoudMouth Component for Mambo, specifically version 4.0j and potentially others. Attackers can exploit this by injecting a malicious URL into the mosConfig_absolute_path parameter, leading to arbitrary PHP code execution. With a CVSS score of 6.8, this vulnerability is of medium severity, allowing remote attackers with moderate complexity to achieve partial confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation, an ExploitDB entry exists, and there is minimal community discussion or media coverage surrounding this older vulnerability.