CVE-2008-5789 Multiple PHP remote file inclusion vulnerabilities in the Recly Interactive Feederator (com_feederator) component 1.0.5 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in th...
HighCVSS 7.5
EPSS 45.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple PHP remote file inclusion vulnerabilities in the Recly Interactive Feederator (com_feederator) component 1.0.5 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the (1) mosConfig_absolute_path parameter to (a) add_tmsp.php, (b) edit_tmsp.php and (c) tmsp.php in includes/tmsp/; and the (2) GLOBALS[mosConfig_absolute_path] parameter to (d) includes/tmsp/subscription.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| recly interactive feederator | = 1.0.5 | No fix listed |
References
- 4827 third-party-advisory
- 32194 exploit vdb-entry
- feederator-mosconfigabsolute-file-include(46438) vdb-entry
- 7040 exploit