• info
• discussion
• exploit
• solution
• references

RETIRED: Joomla JEvents Component Comutils.PHP Remote File Include Vulnerability

The Joomla JEvents component is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input.

An attacker can exploit these issues to execute malicious PHP code in the context of the webserver process. This may allow the attacker to compromise the application and the underlying system; other attacks are also possible.

This issue affects JEvents 1.4.1; other versions may also be affected.

NOTE: This BID has been retired because the application has been found not vulnerable.