Remote file inclusion

PHP remote file inclusion vulnerability in xajaxfunctions.php in the JUser comjuser 1.0.14 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...