CVE:CVE-2007-5362
CNNVD:CNNVD-200710-190
Mambo和Joomla!的Avant-Garde Solutions MOSMedia Lite (com_mosmedia) 4.5.1构成中存在多个PHP远程文件包含漏洞， 远程攻击者可以借助includes/中的(1) credits.html.php, (2) info.html.php, (3) media.divs.php, (4) media.divs.js.php, (5) purchase.html.php,或 (6) support.html.php 的mosConfig_absolute_path参数的一个URL执行任意PHP代码。
solution:Upgrade ag-solutions mosmedia_lite to a higher version than 4.5.1,and avoid the version 4.5.1; Upgrade joomla joomla to a higher version than *; Upgrade mambo mambo to a higher version than *