CVE-2010-2918 PHP remote file inclusion vulnerability in core/include/myMailer.class.php in the Visites (com_joomla-visites) component 1.1 RC2 for Joomla! allows remote attackers to execute arbitrary PHP code via a...
HighCVSS 7.5
EPSS 13.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in core/include/myMailer.class.php in the Visites (com_joomla-visites) component 1.1 RC2 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| visocrea com joomla visites | = 1.1-rc2 | No fix listed |
References
- packetstormsecurity.org exploit
- 14476 exploit
- 28942 exploit vdb-entry
- ADV-2010-1925 vdb-entry vendor-advisory
- visites-mymailerclass-file-include(42025) vdb-entry