← Database

CVE-2007-4955

MEDIUM CVSS: 6.8 Published: 2007-09-18 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in admin.joomlaflashfun.php in the Flash Fun! (com_joomlaflashfun) 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.

Affected Platforms

Joomla Flash Fun Component

Weakness Type

CWE-94

References