Description
Joomla! before 1.0.11 omits some checks for whether _VALID_MOS is defined, which allows attackers to have an unknown impact, possibly resulting in PHP remote file inclusion.
Remediation
References
Related Vulnerabilities
Apache Tomcat Improperly Implemented Security Check for Standard Vulnerability (CVE-2017-15706)
WordPress Other Vulnerability (CVE-2013-0235)
Envoy Proxy Improper Encoding or Escaping of Output Vulnerability (CVE-2023-35941)
WordPress Plugin WP-Live Chat by 3CX Cross-Site Scripting (6.2.03)
WordPress Plugin Lazyest Gallery 'image' Parameter Cross-Site Scripting (1.0.28)