Description

PHP remote file inclusion vulnerability in index.php in Joomla! 1.0.11 through 1.0.14, when RG_EMULATION is enabled in configuration.php, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Remediation

References

CVE-2008-5671

Related Vulnerabilities

MODX Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-7324)

MongoDb Improper Handling of Exceptional Conditions Vulnerability (CVE-2020-7923)

MySQL CVE-2015-0499 Vulnerability (CVE-2015-0499)

WordPress Plugin Evarisk 'uploadPhotoApres.php' Arbitrary File Upload (5.1.5.4)

PHP Improper Input Validation Vulnerability (CVE-2009-1272)

Severity

High

Classification

CVE-2008-5671 CWE-94

Tags

Missing Update Known Vulnerabilities