CVE-2009-4431

CVE-2009-4431 is a PHP remote file inclusion in cal_popup.php of the Joomla! JCal Pro (com_jcalpro/JCP) component version 1.5.3.6. The underlying issue is a vulnerability in the mosConfig_absolute_path parameter that enables remote attackers to execute arbitrary PHP code through a crafted URL. Af...