CVE-2008-5790

CVE-2008-5790 describes multiple remote file inclusion vulnerabilities in the Recly!Competitions component 1.0 for Joomla!, allowing attackers to execute arbitrary PHP code. Specifically, the GLOBALS[mosConfig_absolute_path] parameter in add.php and competitions.php, and the mosConfig_absolute_path parameter in settings.php, can be manipulated with a malicious URL. This vulnerability carries a CVSS score of 7.5, indicating high severity with network-based attacks requiring low complexity and no authentication, potentially leading to partial compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, public exploit code exists on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.