Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHP remote file inclusion vulnerability in contxtd.class.php in the Contacts XTD (ContXTD) component for Mambo (com_contxtd) allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: another researcher has disputed this issue, saying that the software prevents the attack by checking whether _VALID_MOS is defined
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Mambo软件的Contacts XTD 'contxtd.class.php'PHP远程文件包含漏洞
Vulnerability Description
**有争议** Mambo软件的Contacts XTD (ContXTD)组件(com_contxtd) 中contxtd.class.php脚本存在PHP远程文件包含漏洞，远程攻击者可借助mosConfig_absolute_path参数中的URL执行任意PHP代码。注：另一研究人员对此问题存在争议，称软件通过对_VALID_MOS是否定义进行检验就可预防该攻击。
CVSS Information
N/A
Vulnerability Type
N/A