Multiple PHP remote file inclusion vulnerabilities in (1) uhp_config.php, and possibly (2) footer.php, (3) functions.php, (4)…

Description

Multiple PHP remote file inclusion vulnerabilities in (1) uhp_config.php, and possibly (2) footer.php, (3) functions.php, (4) install.uhp.php, (5) toolbar.uhp.html.php, (6) uhp.class.php, and (7) uninstall.uhp.php, in the UHP (User Home Pages) 0.5 component (aka com_uhp) for Mambo or Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Scores

EPSS (exploitation in 30 days)

11.0% · top 4.1% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.8.

Weakness

• n/a
• CWE-94 (opens in a new tab)All about CWE-94 and its CVEs

Affected products

• n/a

  • affected n/a

References (17)

• http://www.ravenswoodit.co.uk/index.php?option=com_docman&task=cat_view&gid=76&Itemid=13 (opens in a new tab)x_refsource_MISCx_transferred
• 27651 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 19233 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• 21305 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 23113 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred
• http://kurdishsecurity.blogspot.com/2006/07/kurdish-security-15-user-home-pges.html (opens in a new tab)x_refsource_MISCx_transferred
• 20070323 Re: Mambo Module uhp 0.3 (uhp_config.php) Remote File Inclusion Exploit (opens in a new tab)mailing-listx_refsource_VIMx_transferred
• ADV-2006-3056 (opens in a new tab)vdb-entryx_refsource_VUPENx_transferred
• 20070323 Mambo Module uhp 0.3 (uhp_config.php) Remote File Inclusion Exploit (opens in a new tab)mailing-listx_refsource_VIMx_transferred
• 2089 (opens in a new tab)exploitx_refsource_EXPLOIT-DBx_transferred
• 28111 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 27652 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 3553 (opens in a new tab)exploitx_refsource_EXPLOIT-DBx_transferred
• 28112 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 28113 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• userhomepage-multiple-scripts-file-include(28080) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• uhp-uhpconfig-file-include(33178) (opens in a new tab)vdb-entryx_refsource_XFx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2006-3995](https://trackcve.app/badge/CVE-2006-3995.svg)](https://trackcve.app/cve/CVE-2006-3995)

Record last updated 7 Aug 2024, 18:48 UTC.