CVE:CVE-2006-4296
CNNVD:CNNVD-200608-359
Mambo 1.1的bigAPE-Backup组件(com_babackup)中的classes/Tar.php脚本存在PHP远程文件包含漏洞，远程攻击者可借助mosConfig_absolute_path参数包含任意文件。
solution:Upgrade mambo bigape-backup_component to a higher version than *