CVE-2008-5671: Code Injection
PHP remote file inclusion vulnerability in index.php in Joomla! 1.0.11 through 1.0.14, when RGEMULATION is enabled in configuration.php, allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Edit configuration.php and disable RG_EMULATION (set RG_EMULATION to false/0 or remove/undefine it) to prevent remote file inclusion via the mosConfig_absolute_path parameter.
Joomla RG_EMULATION = disabled
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5671?
CVE-2008-5671 is considered a critical vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2008-5671?
To fix CVE-2008-5671, upgrade Joomla! to version 1.0.15 or later where the vulnerability has been addressed.
Which versions of Joomla! are affected by CVE-2008-5671?
CVE-2008-5671 affects Joomla! versions 1.0.11 through 1.0.14 when RG_EMULATION is enabled.
What type of vulnerability is CVE-2008-5671?
CVE-2008-5671 is a remote file inclusion vulnerability that can lead to arbitrary code execution.
Can CVE-2008-5671 be exploited remotely?
Yes, CVE-2008-5671 can be exploited remotely by attackers to execute arbitrary PHP code.