CVE-2007-1596: Joomla! Nfn Address Book

High severity, CVSS 9.3. EPSS: 7.8% chance of exploitation in the next 30 days.

Multiple PHP remote file inclusion vulnerabilities in the NFN Address Book (com_nfn_addressbook) 0.4 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) components/com_nfn_addressbook/nfnaddressbook.php or (2) administrator/components/com_nfn_addressbook/nfnaddressbook.php.

Affected products

• Joomla! Nfn Address Book: version 0.4 only
• Mambo Nfn Address Book: version 0.4 only

Published 2007-03-22. Last modified 2026-06-16.