CVE-2007-6038: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in xajaxfunctions.php in the JUser comjuser 1.0.14 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...