CVE-2007-2196

CVE-2007-2196 targets Jambook (com_Jambook) version 1.0 beta7 for Mambo/Joomla!. It describes a PHP remote file inclusion in jambook.php triggered by a URL value for mosConfig_absolute_path, allowing remote code execution. The issue is disputed by third parties who say jambook.php protects agains...