Description
PHP remote file inclusion vulnerability in index.php in Joomla! 1.0.11 through 1.0.14, when RG_EMULATION is enabled in configuration.php, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
References
- 20080214 Joomla 1.0.13 - 1.0.14 / (remote) PHP file inclusion possible if old configuration.php mailing-list
- http://www.joomla.org/announcements/release-news/4609-joomla-1015-released.html
- 29106 third-party-advisory
- 27795 vdb-entry
- 20080215 Re: Joomla 1.0.13 - 1.0.14 / (remote) PHP file inclusion possible if old configuration.php mailing-list
- 4787 third-party-advisory