← Database

CVE-2010-2918

HIGH CVSS: 7.5 Published: 2010-07-30 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in core/include/myMailer.class.php in the Visites (com_joomla-visites) component 1.1 RC2 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Affected Platforms

Visocrea Com Joomla VisitesJoomla Joomla\!

Weakness Type

CWE-94

References