CVE-2008-2990

EXPLOITED

Joomla Com Facileforms - Code Injection

Title source: rule

Description

PHP remote file inclusion vulnerability in facileforms.frame.php in the FacileForms (com_facileforms) component 1.4.4 for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the ff_compath parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Kacak · textwebappsphp

https://www.exploit-db.com/exploits/5915

View Code ZIP pw:eip

References (4)

[Exploit] http://www.securityfocus.com/bid/29904

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/5915

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/43290

[Third Party Advisory] http://securityreason.com/securityalert/3967

Scores

EPSS 0.0050

EPSS Percentile 66.1%

Details

VulnCheck KEV 2016-09-05

CWE

CWE-94

Status published

Products (3)

joomla/com_facileforms 1.4.4

joomla/joomla

mambo/com_facileforms 1.4.4

Published Jul 02, 2008

Tracked Since Feb 18, 2026