CVE-2008-5793: Multiple PHP remote file inclusion vulnerabilities in the Clickheat - Heatmap stats (com_clickheat) compone...

Security readout for executives and security teams

CVE-2008-5793 affects the Clickheat Heatmap stats component for Joomla! 1.0.1. An attacker could abuse file-inclusion parameters to make the site load remote PHP, potentially taking control of the web application. This is most relevant for old Joomla estates or forgotten plugins. Exposure is likely limited to legacy Joomla! sites that still run the Clickheat Heatmap stats com_clickheat component version 1.0.1, especially internet-facing installs with the listed PHP files reachable. Treat this as high priority for legacy web estates. The business risk is server-side code execution on public Joomla sites, but urgency depends on whether this old component is actually deployed. Mitigation focus: Check vendor or Joomla extension guidance for a fixed release; none is named in the supplied sources.; Remove or disable com_clickheat where it is not required.; Upgrade or replace the component if a maintained fixed version exists..

Prepared

Jun 28, 2026, 11:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.