CVE-2006-5048

CVE-2006-5048 describes multiple remote file inclusion vulnerabilities in the Security Images (com_securityimages) component, version 3.0.5 and earlier, for Joomla! and Mambo. Attackers can exploit this by injecting a malicious URL into the mosConfig_absolute_path parameter within specific PHP files (configinsert.php, lang.php, client.php, and server.php), leading to arbitrary code execution. This vulnerability has a CVSS score of 6.8, indicating a medium severity, and allows for partial confidentiality, integrity, and availability impact with medium access complexity. While not listed on the KEV catalog, exploit code is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.