Joomla Component com_performs Remote File Inclusion (CVE-2006-3774)

A file inclusion vulnerability has been reported in Joomla Performs Component. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2006-3774

CVE-2006-3774 affects Joomla!’s com_performs (perForms) up to version 1.0 and earlier. The root cause is a PHP remote file inclusion via the mosConfig_absolute_path parameter in performs.php, which allows a remote attacker to cause arbitrary PHP code execution by supplying a crafted URL. The avai...

CVE-2006-3774

PHP remote file inclusion vulnerability in performs.php in the perForms component comperforms 1.0 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...