CVE-2008-6221 PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager (com_dadamail) component 2.6 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the....
HighCVSS 7.5
EPSS 54.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager (com_dadamail) component 2.6 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[mosConfig_absolute_path] parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dadamailproject dada mail manager | = 2.6 | No fix listed |
References
- 32551 third-party-advisory vendor-advisory
- 32135 exploit vdb-entry
- ADV-2008-3021 vdb-entry
- dmm-configdadamail-file-include(46378) vdb-entry
- 7002 exploit