← Database

CVE-2008-6221

HIGH CVSS: 7.5 Published: 2009-02-20 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager (com_dadamail) component 2.6 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[mosConfig_absolute_path] parameter.

Affected Platforms

Joomla JoomlaDadamailproject Dada Mail Manager

Weakness Type

CWE-94

References