Open Source Matters · Joomla! · CVE-2008-5671
**Name of the Vulnerable Software and Affected Versions**
Joomla! versions 1.0.11 through 1.0.14
**Description**
The issue allows remote attackers to execute arbitrary PHP code via a URL in the `mosConfig absolute path` parameter when `RG EMULATION` is enabled in `configuration.php`. This is a result of a remote file inclusion vulnerability in `index.php`.
**Recommendations**
For Joomla! versions 1.0.11 through 1.0.14, consider disabling the `RG EMULATION` setting in `configuration.php` as a temporary workaround to minimize the risk of exploitation. Restrict access to the `mosConfig absolute path` parameter in the affected `index.php` file until a fix is available.