← Database

CVE-2008-6347

HIGH CVSS: 7.5 Published: 2009-03-02 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in lib/onguma.class.php in the Onguma Time Sheet (com_ongumatimesheet20) 2.0 4b component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Affected Platforms

Joomla JoomlaLuigi Massa Onguma Time Sheet

Weakness Type

CWE-94

References