CVE:CVE-2007-1596
CNNVD:CNNVD-200703-554
Mambo和Joomla! NFN Address Book(com_nfn_addressbook)0.4组件中存在多个PHP远程文件包含漏洞。远程攻击者可以借助提交到(1)components/com_nfn_addressbook/nfnaddressbook.php或(2)administrator/components/com_nfn_addressbook/nfnaddressbook.php的mosConfig_absolute_path参数中的一个URL，执行任意的PHP代码。
solution:Upgrade joomla nfn_address_book to a higher version than 0.4,and avoid the version 0.4; Upgrade mambo nfn_address_book to a higher version than 0.4,and avoid the version 0.4