CVE-2008-2990

A PHP remote file inclusion (RFI) vulnerability exists in the facileforms.frame.php file of the FacileForms (com_facileforms) component version 1.4.4 for Mambo and Joomla! . The root cause is improper control of generation of code, where a remote attacker can execute arbitrary PHP code by providi...

CVE-2008-0855

CVE-2008-0855 describes an SQL injection in the Facile Forms (com_facileforms) component for Joomla! and Mambo, exploitable via the catid parameter to index.php. The vulnerability, as documented by NVD, has a base score of 7.5 (HIGH) with network attack vector, no authentication, and partial impa...