CVE-2007-4186: Medium severity Joomla Tour de France Pool vulnerability
Published Aug 8, 2007
·Updated
PHP remote file inclusion vulnerability in admin.tourtoto.php in the Tour de France Pool (comtourtoto) 1.0.1 module for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter.
Affected Software
1 affected component
Joomla Tour de France Pool=1.0.1
Event History
Aug 8, 2007
CVE Published
01:17 AM
CVE Published
via MITRE·05:11 AM
Data Sourced
via MITRE·05:11 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4186?
CVE-2007-4186 is considered a high severity vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2007-4186?
To fix CVE-2007-4186, upgrade to a patched version of the Tour de France Pool module for Joomla!.
3
Who is affected by CVE-2007-4186?
CVE-2007-4186 affects users who have installed the Tour de France Pool version 1.0.1 module on Joomla!.
4
What type of vulnerability is CVE-2007-4186?
CVE-2007-4186 is a remote file inclusion vulnerability that allows remote attackers to execute arbitrary PHP code.
5
When was CVE-2007-4186 discovered?
CVE-2007-4186 was published on July 23, 2007.