CVE:CVE-2007-1699
CNNVD:CNNVD-200703-621
Mambo and Joomla!SWmenu (com_swmenupro and com_swmenufree)组件4.0中存在多个PHP远程文件包含漏洞。远程攻击者可以借助 提交到ImageManager/Classes/ImageManager.php的mosConfig_absolute_path参数中的一个URL，执行任意的PHP代码。
solution:Upgrade joomla swmenu_component to a higher version than 4.0,and avoid the version 4.0; Upgrade mambo swmenu_component to a higher version than 4.0,and avoid the version 4.0