CVE-2008-1682

CVE-2008-1682 describes a PHP remote file inclusion vulnerability in the Joomla! Online FlashQuiz (com_onlineflashquiz) 1.0.2 component. The flaw is in quiz/common/db_config.inc.php, where an attacker can supply a URL in the base_dir parameter to execute arbitrary PHP code on the affected system....