https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-2043.htmlhttps://patchthecve.com/cve/CVE-2007-2043.htmlTue, 16 Jun 2026 22:38:48 +0000HIGH 7.5: Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia (com_mosmedia) 1.08 and earlier module for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) media.tab.php or (2) media.divs.php.https://patchthecve.com/cve/CVE-2007-2042.htmlhttps://patchthecve.com/cve/CVE-2007-2042.htmlTue, 16 Jun 2026 22:38:48 +0000MEDIUM 6.8: Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia Lite 1.0.6 and earlier module for Mambo allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) support.html.php or (2) info.html.php. NOTE: the provenancehttps://patchthecve.com/cve/CVE-2006-5042.htmlhttps://patchthecve.com/cve/CVE-2006-5042.htmlTue, 16 Jun 2026 22:30:23 +0000HIGH 7.5: Unspecified vulnerability in mosMedia (com_mosmedia) 1.0.8 and earlier for Joomla! has unspecified impact and attack vectors.