CVE:CVE-2008-2990
CNNVD:CNNVD-200807-047
Mambo ，Joomla 是一套基于php的文件内容管理系统。
Mambo和Joomla! FacileForms (com_facileforms)组件1.4.4的facileforms.frame.php存在PHP远程文件包含漏洞，远程攻击者通过ff_compath参数中的一个URL来执行任意PHP代码。
solution:Upgrade joomla com_facileforms to a higher version than 1.4.4,and avoid the version 1.4.4; Upgrade joomla joomla to a higher version than *; Upgrade mambo com_facileforms to a higher version than 1.4.4,and avoid the version 1.4.4