CVE-2008-6347: Luigi Massa Onguma Time Sheet

High severity, CVSS 7.5. EPSS: 31.1% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in lib/onguma.class.php in the Onguma Time Sheet (com_ongumatimesheet20) 2.0 4b component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Affected products

• Luigi Massa Onguma Time Sheet: version 2.04 only

Published 2009-03-02. Last modified 2026-06-16.