CVE-2006-4286

CVE-2006-4286 describes a remote file inclusion vulnerability in the contentpublisher component (com_contentpublisher) for Mambo, allowing attackers to execute arbitrary PHP code by manipulating the mosConfig_absolute_path parameter. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low complexity, and potential for partial compromise of confidentiality, integrity, and availability. While there is no known active exploitation, public exploit code, or KEV listing, the vulnerability has garnered significant community discussion, though its existence has been disputed by third parties.