CVE-2006-4470

Joomla! prior to 1.0.11 omits a check for whether _VALID_MOS is defined, potentially enabling PHP remote file inclusion with unknown impact. The affected component is Joomla! (core PHP code path handling _VALID_MOS). Publicly available references describe the vulnerability as allowing an attacker...