CVE-2007-4955: Joomla! Flash Fun Component

Medium severity, CVSS 6.8. EPSS: 30% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in admin.joomlaflashfun.php in the Flash Fun! (com_joomlaflashfun) 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.

Affected products

• Joomla! Flash Fun Component: version 1.0 only

Published 2007-09-18. Last modified 2026-06-16.