CVE-2007-2005: Code Injection

Published Apr 12, 2007

Updated

Multiple PHP remote file inclusion vulnerabilities in the Taskhopper 1.1 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to (1) contacttype.php, (2) itemstatustype.php, (3) projectstatustype.php, (4) requesttype.php, (5) responsestype.php, (6) timelogtype.php, or (7) urgencytype.php in inc/.

Affected Software

2 affected components

Joomla Taskhopper Component=1.1

Mambo Taskhopper Component=1.1

Event History

Apr 12, 2007

CVE Published

07:19 PM

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-2005?

CVE-2007-2005 is considered a high severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2007-2005?

To fix CVE-2007-2005, you should upgrade the Taskhopper component to the latest version that is not affected by this vulnerability.

Which software is affected by CVE-2007-2005?

CVE-2007-2005 affects Taskhopper component version 1.1 for both Joomla and Mambo.

Can CVE-2007-2005 be exploited remotely?

Yes, CVE-2007-2005 can be exploited remotely, allowing attackers to execute arbitrary PHP code.

What components are specifically vulnerable in CVE-2007-2005?

The specific components vulnerable in CVE-2007-2005 include contact_type.php, itemstatus_type.php, and projectstatus_type.php.