Mamboxchange · Mamboxchange Moskool · CVE-2006-3967
**Name of the Vulnerable Software and Affected Versions**
MamboXChange Moskool version 1.5
**Description**
The issue allows remote attackers to execute arbitrary PHP code via a URL in the `mosConfig absolute path` parameter in the component/option,com moskool/Itemid,34/admin.moskool.php file.
**Recommendations**
For MamboXChange Moskool version 1.5, consider restricting access to the `admin.moskool.php` file to minimize the risk of exploitation. Avoid using the `mosConfig absolute path` parameter in the affected URL until the issue is resolved.