← Database

CVE-2009-4604

HIGH CVSS: 7.5 Published: 2010-01-12 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in mamboleto.php in the Fernando Soares Mamboleto (com_mamboleto) component 2.0 RC3 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Affected Platforms

Fernando Soares Com MamboletoJoomla Joomla

Weakness Type

CWE-94

References