CVE-2006-4074

CVE-2006-4074 affects the JD-Wiki (com_jd-wiki) Joomla! component (1.0.2 and earlier). The vulnerability is a PHP remote file inclusion in lib/tpl/default/main.php that, when register_globals is enabled, allows an attacker to supply a URL via mosConfig_absolute_path to execute arbitrary PHP on th...

CVE-2007-3130

CVE-2007-3130 concerns multiple PHP remote file inclusion vulnerabilities in the OpenWiki (com_jd-wiki) Joomla! component (JD-Wiki) 1.0.2 and earlier. The root cause is improper use of the mosConfig_absolute_path parameter, allowing an attacker to supply a URL to include arbitrary PHP code via dw...