high7.5
CVE-2006-4320
PHP remote file inclusion vulnerability in sef.php in the OpenSEF 2.0.0 component for Joomla!
Impact
PHP remote file inclusion vulnerability in sef.php in the OpenSEF 2.0.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opensef Project | Opensef | Versions 2.0-beta3, 2.0_rc1, 2.0_rc2, 2.0_rc3, 2.0_rc4, 2.0_rc5 |
References
- NVD record
- CVE.org record
- http://securitytracker.com/id?1016722
- http://www.securityfocus.com/archive/1/443745/100/0/threaded
- http://www.securityfocus.com/bid/19600
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28479
- http://securitytracker.com/id?1016722
- http://www.securityfocus.com/archive/1/443745/100/0/threaded
- http://www.securityfocus.com/bid/19600
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28479