Joomlaboard Component for Joomla! "mosConfig_absolute_path" File Inclusion Vulnerability


Description   A vulnerability has been identified in Joomlaboard (component for Joomla!), which may be exploited by attackers to execute arbitrary commands. For additional information, see : FrSIRT/ADV-2006-2716
     
Vulnerable Products   Vulnerable Software:
Joomlaboard (component for Joomla!) version 1.1 and prior
     
Solution   Upgrade to Joomlaboard version 1.1.2 : http://developer.joomla.org/sf/frs/do/viewSummary/projects.simpleboard/frs
     
CVE   CVE-2006-5043
     
References  
     
Vulnerability Manager Detection   No
     
IPS Protection  
ASQ Engine alarm Available Since
Mambo: possible remote file inclusion using mosConfig_absolute_path
3.2.0
     


 
 
 
 
 Risk level 
High 

 Vulnerability First Public Report Date 
2006-07-14 

 Target Type 
Server 

 Possible exploit 
Local & Remote