Unrated severityNVD Advisory· Published Aug 8, 2007· Updated Apr 23, 2026
CVE-2007-4186
CVE-2007-4186
Description
PHP remote file inclusion vulnerability in admin.tour_toto.php in the Tour de France Pool (com_tour_toto) 1.0.1 module for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Affected products
1- cpe:2.3:a:joomla:tour_de_france_pool:1.0.1:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
6News mentions
0No linked articles in our index yet.