EUVD-2008-6317

Malware in sbrugna...

CVE-2008-6347

PHP remote file inclusion vulnerability in lib/onguma.class.php in the Onguma Time Sheet comongumatimesheet20 2.0 4b component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in lib/onguma.class.php in the Onguma Time Sheet comongumatimesheet20 2.0 4b component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2008-6347

PHP remote file inclusion vulnerability in lib/onguma.class.php in the Onguma Time Sheet comongumatimesheet20 2.0 4b component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter...

CVE-2008-6347

CVE-2008-6347 is a PHP remote file inclusion vulnerability in Onguma Time Sheet (com_ongumatimesheet20) for Joomla! 2.0 4b. The flaw allows RCE by passing a URL to mosConfig_absolute_path that is used by lib/onguma.class.php. Public exploits exist (e.g., Exploit-DB entry 6976; CANVAS-related note...