CVE-2008-6841 PHP remote file inclusion vulnerability in the Green Mountain Information Technology and Consulting Database Query (com_dbquery) component 1.4.1.1 and earlier for Joomla! allows remote attackers to ex...
HighCVSS 7.5
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in the Green Mountain Information Technology and Consulting Database Query (com_dbquery) component 1.4.1.1 and earlier for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to classes/DBQ/admin/common.class.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gmitc com dbquery | <= 1.4.1.1 | No fix listed |
| gmitc com dbquery | = 1.0 | No fix listed |
References
- 30093 exploit vdb-entry
- database-query-commonclass-file-include(43615) vdb-entry
- 6003 exploit