Security Advisory

CVE-2008-6347

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2009-03-02 16:00:00
Last updated 2024-08-07 11:27:35
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

PHP remote file inclusion vulnerability in lib/onguma.class.php in the Onguma Time Sheet (com_ongumatimesheet20) 2.0 4b component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.