CVE-2006-3774

CVE-2006-3774 affects Joomla!’s com_performs (perForms) up to version 1.0 and earlier. The root cause is a PHP remote file inclusion via the mosConfig_absolute_path parameter in performs.php, which allows a remote attacker to cause arbitrary PHP code execution by supplying a crafted URL. The avai...