CVE-2006-0871

MEDIUM · CVSS 6.4 EPSS 1.67%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2006-02-24 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE

CVE-2006-0871

Severity

MEDIUM

CVSS

6.4

EPSS

1.67%

Original NVD Description

Directory traversal vulnerability in the _setTemplate function in Mambo 4.5.3, 4.5.3h, and possibly earlier versions allows remote attackers to read and include arbitrary files via the mos_change_template parameter. NOTE: CVE-2006-1794 has been assigned to the SQL injection vector.