| Package | Affected versions | Patched versions |
|---|---|---|
| constructor component | ≤ 0.6b |
PHP remote file inclusion vulnerability in admin.lurm_constructor.php in the Lurm Constructor component (com_lurm_constructor) 0.6b and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the lm_absolute_path parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free