CVE-2008-6347

CVE-2008-6347 is a PHP remote file inclusion vulnerability in Onguma Time Sheet (com_ongumatimesheet20) for Joomla! 2.0 4b. The flaw allows RCE by passing a URL to mosConfig_absolute_path that is used by lib/onguma.class.php. Public exploits exist (e.g., Exploit-DB entry 6976; CANVAS-related note...