CVE:CVE-2006-3773
CNNVD:CNNVD-200607-391
Joomla!和Mambo 4.5.3+的SMF-Forum 1.3.1.3 Bridge组件(com_smf)中的smf.php存在PHP远程文件包含漏洞。远程攻击者可以借助mosConfig_absolute_path参数中的URL执行任意PHP代码。
solution:Upgrade mambo smf-forum to a higher version than 1.3.1.3_bridge_component,and avoid the version 1.3.1.3_bridge_component