Unrated severityNVD Advisory· Published Mar 2, 2009· Updated Apr 23, 2026
CVE-2008-6347
CVE-2008-6347
Description
PHP remote file inclusion vulnerability in lib/onguma.class.php in the Onguma Time Sheet (com_ongumatimesheet20) 2.0 4b component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Affected products
1- cpe:2.3:a:luigi_massa:onguma_time_sheet:2.04:beta:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.