CVE-2009-4789: Multiple PHP remote file inclusion vulnerabilities in the MojoBlog component RC 0.15 for Joomla!

Security readout for executives and security teams

This is an old Joomla component flaw in MojoBlog RC 0.15. If the vulnerable component is still exposed, a remote attacker may be able to make the site run arbitrary PHP code. That can become full website compromise, but the source bundle does not provide CVSS, patch details, or active exploitation evidence. Likely exposure is limited to legacy Joomla sites that still run MojoBlog RC 0.15 and expose the named component scripts. Modern environments are unlikely to be affected unless this old component remains installed. The sparse affected-product metadata means inventory validation is necessary. Prioritize if any internet-facing legacy Joomla site still runs MojoBlog RC 0.15. The business risk is website takeover through remote PHP execution. If the component is not present, no action beyond documenting non-exposure is needed. Mitigation focus: Identify and remove MojoBlog RC 0.15 if no longer required.; Check vendor or project guidance for any available fixed version.; Restrict public access to the affected component paths where removal is not immediate..

Prepared

Jun 28, 2026, 02:49 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.