Joomla! D4J eZine (com_ezine) component version 2.1 and earlier
Attacker crafts a malicious URL containing arbitrary PHP code and sends it via the GLOBALS[mosConfig_absolute_path] parameter to d4m_ajax_pagenav.php for remote code execution
Upgrade D4J eZine component to patched version or disable/remove the component if not in use; implement strict input validation and path sanitization
If file path is returned, the vulnerable component exists; check component version in Joomla administrator panel to confirm if patching is required
find /var/www/html -name 'd4m_ajax_pagenav.php' 2>/dev/null | head -1
AV:N/AC:L/Au:N/C:P/I:P/A:P