CVE-2006-4320: Opensef Project Opensef

High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in sef.php in the OpenSEF 2.0.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Affected products

• Opensef Project Opensef: version 2.0-beta3 only; version 2.0_rc1 only; version 2.0_rc2 only; version 2.0_rc3 only; version 2.0_rc4 only; version 2.0_rc5 only; …

Published 2006-08-24. Last modified 2026-06-16.