Vulnerabilities > Mambo > NFN Address Book > 0.4

DATE CVE VULNERABILITY TITLE RISK
2007-03-22 CVE-2007-1596 Remote File Include vulnerability in NFN Address Book mosConfig_Absolute_Path
Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book (com_nfn_addressbook) 0.4 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) components/com_nfn_addressbook/nfnaddressbook.php or (2) administrator/components/com_nfn_addressbook/nfnaddressbook.php.
network
joomla mambo
critical
9.3