← Database

CVE-2007-2319

MEDIUM CVSS: 6.8 Published: 2007-04-26 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in the AutoStand 1.1 and earlier module for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to mod_as_category.php in (1) modules/mod_as_category/ or (2) modules/.

Affected Platforms

Autostand Category Autostand Category

Weakness Type

CWE-94

References