CVE-2006-4320

Published: Aug 24, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

PHP remote file inclusion vulnerability in sef.php in the OpenSEF 2.0.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Affected (8)

Products: Opensef Project: Opensef

Opensef Project

1 product

Opensef

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Opensef Project Opensef	Version 2.0-beta3
Opensef Project Opensef	Version 2.0_rc1
Opensef Project Opensef	Version 2.0_rc2
Opensef Project Opensef	Version 2.0_rc3
Opensef Project Opensef	Version 2.0_rc4
Opensef Project Opensef	Version 2.0_rc5
Opensef Project Opensef	Version 2.0_rc5_sp1
Opensef Project Opensef	Version 2.0_rc5_sp2