CVE-2008-6221: Dadamailproject Dada Mail Manager

High severity, CVSS 7.5. EPSS: 54% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in config.dadamail.php in the Dada Mail Manager (com_dadamail) component 2.6 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[mosConfig_absolute_path] parameter.

Affected products

• Dadamailproject Dada Mail Manager: version 2.6 only

Published 2009-02-20. Last modified 2026-06-16.