CVE-2007-5310 PHP remote file inclusion vulnerability in admin.wmtportfolio.php in the webmaster-tips.net wmtportfolio 1.0 (com_wmtportfolio) component for Joomla! allows remote attackers to execute arbitrary PHP c...
MediumCVSS 6.8
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in admin.wmtportfolio.php in the webmaster-tips.net wmtportfolio 1.0 (com_wmtportfolio) component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| joomla | All versions | No fix listed |
| webmaster-tips.net flash image gallery | = 1.0 | No fix listed |
References
- 38644 vdb-entry
- 25959 vdb-entry
- joomla-wmtportfolio-file-include(36993) vdb-entry
- 4497 exploit