CVE-2007-4187: Code Injection

Published Aug 8, 2007

Updated

Multiple eval injection vulnerabilities in the comsearch component in Joomla! 1.5 beta before RC1 (aka Mapya) allow remote attackers to execute arbitrary PHP code via PHP sequences in the searchword parameter, related to defaultresults.php in (1) components/comsearch/views/search/tmpl/ and (2) templates/beez/html/comsearch/search/.

Affected Software

1 affected component

Joomla joomla=1.5.0_beta

Event History

Aug 8, 2007

CVE Published

01:17 AM

CVE Published

via MITRE·05:11 AM

Data Sourced

via MITRE·05:11 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-4187?

CVE-2007-4187 is considered a high severity vulnerability due to its potential to allow arbitrary PHP code execution.

How do I fix CVE-2007-4187?

To fix CVE-2007-4187, upgrade Joomla! to a version later than 1.5.0 beta, which contains patches for this vulnerability.

What are the potential impacts of CVE-2007-4187?

The potential impacts of CVE-2007-4187 include unauthorized access, data theft, and complete server compromise.

Which Joomla! versions are affected by CVE-2007-4187?

CVE-2007-4187 affects Joomla! 1.5 beta versions before RC1.

Can CVE-2007-4187 be exploited remotely?

Yes, CVE-2007-4187 can be exploited remotely through crafted input in the searchword parameter.