CVE-2008-6221
Last modified
CVE-2008-6221 is a vulnerability of currently unknown severity. PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager (com_dadamail) component 2.6 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[mosConfig_absolute_path] parameter.. EPSS estimates a 27.89% chance of exploitation in the next 30 days.
Description
PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager (com_dadamail) component 2.6 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[mosConfig_absolute_path] parameter.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dadamailproject | Dada Mail Manager | 2.6 |
References
- http://secunia.com/advisories/32551Vendor Advisory
- http://secunia.com/advisories/32551Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-6221?
How severe is CVE-2008-6221?
How do I fix CVE-2008-6221?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-6215Cross-site scripting (XSS) vulnerability in cadena_ofertas_e…
- CVE-2008-6216SQL injection vulnerability in cadena_ofertas_ext.php in Ven…
- CVE-2008-6217Cross-site scripting (XSS) vulnerability in index.php in Ext…
- CVE-2008-6218Memory leak in the png_handle_tEXt function in pngrutil.c in…
- CVE-2008-6219nsrexecd.exe in multiple EMC Networker products including EM…
- CVE-2008-6220SQL injection vulnerability in login.php in Simple Document …
- CVE-2008-6222Directory traversal vulnerability in the Pro Desk Support Ce…
- CVE-2008-6223PHP remote file inclusion vulnerability in visualizza.php in…
- CVE-2008-6224Directory traversal vulnerability in visualizza.php in Way O…
- CVE-2008-6225SQL injection vulnerability in info.php in Mole Group Airlin…
- CVE-2008-6226SQL injection vulnerability in moreinfo.php in Pre Projects …
- CVE-2008-6227SQL injection vulnerability in buyer_detail.php in Pre Multi…
Are you affected by CVE-2008-6221?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST