CVE-2007-5410 PHP remote file inclusion vulnerability in admin.wmtrssreader.php in the webmaster-tips.net Flash RSS Reader (com_wmtrssreader) 1.0 component for Joomla! allows remote attackers to execute arbitrary P...
MediumCVSS 6.8
EPSS 5.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in admin.wmtrssreader.php in the webmaster-tips.net Flash RSS Reader (com_wmtrssreader) 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| joomla | All versions | No fix listed |
| webmaster-tips flash rss reader | = 1.0 | No fix listed |
References
- 43765 vdb-entry
- 3211 third-party-advisory
- 20071010 wmtrssreader joomla component 1.0 Remote File Include Vulnerability mailing-list
- 25999 exploit vdb-entry
- www.sibersavascilar.com exploit
- joomla-wmtrssreader-file-include(37056) vdb-entry