CVE-2007-5457 Multiple PHP remote file inclusion vulnerabilities in Michael Dempfle Joomla Flash Uploader (com_jfu or com_joomla_flash_uploader) 2.5.1 component for Joomla! allow remote attackers to execute arbitra...
MediumCVSS 6.8
EPSS 37.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple PHP remote file inclusion vulnerabilities in Michael Dempfle Joomla Flash Uploader (com_jfu or com_joomla_flash_uploader) 2.5.1 component for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) install.joomla_flash_uploader.php and (2) uninstall.joomla_flash_uploader.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| joomla | All versions | No fix listed |
| michael dempfle joomla flash uploader | = 2.5.1 | No fix listed |
References
- 20080117 JoomlaFlash Component Multiple Remote File Inclusion mailing-list
- 26044 vdb-entry
- joomla-flashuploader-file-include(37181) vdb-entry
- joomlaflash-flashuploader-file-include(39737) vdb-entry
- 4521 exploit