PT-2006-5738 · Joomla · Bsq Sitestats

Published 2006-09-26 · Updated 2025-04-09 · CVE-2006-4995

Positive Technologies · (AI Summary)

CVSS v2.0

7.5

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions:

BSQ Sitestats (bsq sitestats) versions prior to 2.1.1 for Joomla!

Description:

The issue allows remote attackers to execute arbitrary PHP code via a URL in the `mosConfig absolute path` parameter. This can be exploited by sending a malicious URL to the vulnerable endpoint.

Recommendations:

For versions prior to 2.1.1, update to version 2.1.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the `mosConfig absolute path` parameter to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2006-4995

Affected Products

Bsq Sitestats

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2006-4995 · Security Note
• http://forum.joomla.org/index.php/topic%2C79477.0.html · Note
• https://t.me/cvenotify/118390 · Telegram Post
• http://developer.joomla.org/sf/sfmain/do/viewProject/projects.bsq_sitestats · Note