CVE-2008-6221

PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager (com_dadamail) component 2.6 for Joomla!

published February 20, 2009

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.0th percentile for exploit probability.

CVSS

—

EPSS

54%

Percentile

99.0

In the wild

Unconfirmed

What it is

PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager (com_dadamail) component 2.6 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[mosConfig_absolute_path] parameter.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.53983 · 99.0th percentile
Published: 2009-02-20T21:25Z

EPSS history

Timeline

01 OCT 03:06Z
EPSS moved 38% → 54%
epss
30 SEP 03:03Z
EPSS moved 38% → 54%
epss
20 FEB 21:25Z
PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager (com_dadamail) component 2.6 for Joomla!
cvelistv5