CVE-2007-2042

CVE-2007-2042 describes multiple remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite module (versions 1.0.6 and earlier) for Mambo. Attackers can exploit this by injecting a malicious URL into the mosConfig_absolute_path parameter within support.html.php or info.html.php, leading to arbitrary PHP code execution. The vulnerability has a CVSS score of 6.8, indicating a medium severity with network-based attacks and moderate complexity, potentially impacting confidentiality, integrity, and availability. There is no known active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.