Joomla Component com_dbquery Remote File Inclusion (CVE-2008-6841)

A file inclusion vulnerability has been reported in Gmitc Com Dbquery. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2008-6841

CVE-2008-6841 affects Joomla! with the com_dbquery component (versions 1.4.1.1 and earlier). The root cause is a PHP remote file inclusion via a URL in the mosConfig_absolute_path parameter passed to classes/DBQ/admin/common.class.php, enabling remote attackers to execute arbitrary PHP code. The ...