CVE-2006-4378

Multiple PHP remote file inclusion vulnerabilities in the Rssxt component for Joomla! comrssxt, possibly 2.0 Beta 1 or 1.0 and earlier, allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter in 1 pinger.php, 2 RPC.php, or 3 rssxt.php. NOTE: another...

CVE-2006-4378

"CVE-2006-4378" affects Joomla! com_rssxt, with remote file inclusion in the Rssxt component (versions prior to 2.0 Beta 1). Vulnerable files include pinger.php, RPC.php, and rssxt.php, where an attacker could supply a mosConfig_absolute_path URL to execute arbitrary PHP code. The issue’s validit...