CVE-2007-2089 Multiple PHP remote file inclusion vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the a...
MediumCVSS 6.8
EPSS 5.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple PHP remote file inclusion vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter to com_articles.php in (1) components/ or (2) classes/html/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jx development article component | <= 1.1 | No fix listed |
References
- 20070415 Mambo/Joomla Component New Article Component RFI mailing-list
- 23513 vdb-entry
- ADV-2007-1394 vdb-entry
- newarticle-comarticles-file-include(33663) vdb-entry
- 3736 exploit