{"cvss":0.0,"datePublished":"2005-11-22T00:00:00Z","dateUpdated":"2005-11-22T00:00:00Z","description":"globals.php in Mambo Site Server 4.0.14 and earlier, when register_globals is disabled, allows remote attackers to overwrite variables in the GLOBALS array and conduct various attacks, as demonstrated using the mosConfig_absolute_path parameter to content.html.php for remote PHP file inclusion.","dueDate":"","id":"CVE-2005-3738","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"mambo_site_server","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"mambo mambo_site_server Improper Control of Generation of Code","vendor":"mambo"}