CVE-2009-4604

CVE-2009-4604 describes a remote file inclusion vulnerability in the Mamboleto component (com_mamboleto) 2.0 RC3 for Joomla!. This flaw allows unauthenticated remote attackers to execute arbitrary PHP code by injecting a malicious URL into the mosConfig_absolute_path parameter within the mamboleto.php script. With a CVSS score of 7.5, this vulnerability is considered high severity, indicating easy exploitation over the network with low attack complexity and no authentication required. Successful exploitation can lead to partial compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or Metasploit/Nuclei modules, exploit code is publicly available on ExploitDB. Despite this, the CVE has minimal community discussion and media coverage, suggesting it is not a widely discussed or actively targeted threat.