CVE-2007-2089: Jx Development Article Component

Medium severity, CVSS 6.8. EPSS: 5.6% chance of exploitation in the next 30 days.

Multiple PHP remote file inclusion vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter to com_articles.php in (1) components/ or (2) classes/html/.

Affected products

• Jx Development Article Component: up to and including 1.1

Published 2007-04-18. Last modified 2026-06-16.