Description
Joomla! before 1.0.11 omits some checks for whether _VALID_MOS is defined, which allows attackers to have an unknown impact, possibly resulting in PHP remote file inclusion.
Remediation
References
Related Vulnerabilities
Craft CMS Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-28783)
WordPress Plugin Simple Events Calendar SQL Injection (1.3.5)
WordPress Plugin Animate It! Cross-Site Scripting (2.3.3)
phpMyAdmin Other Vulnerability (CVE-2005-3301)
Serendipity Improper Access Control Vulnerability (CVE-2016-10082)