CVE-2007-4954: Code Injection
Published Sep 18, 2007
·Updated
PHP remote file inclusion vulnerability in admin.joom12pic.php in the joom12Pic (comjoom12pic) 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter.
Affected Software
1 affected component
Joomla Joom12pic Component=1.0
Event History
Sep 18, 2007
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-4954?
CVE-2007-4954 is classified as a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2007-4954?
To fix CVE-2007-4954, upgrade to a version of the joom12Pic component that is not vulnerable or apply patches provided by the developer.
3
What types of attacks can CVE-2007-4954 enable?
CVE-2007-4954 can enable remote attackers to execute arbitrary PHP code on the affected server.
4
Which software is affected by CVE-2007-4954?
CVE-2007-4954 affects the joom12Pic component version 1.0 for Joomla!.
5
What is the exploitation method for CVE-2007-4954?
CVE-2007-4954 can be exploited through remote file inclusion by manipulating the mosConfig_live_site parameter.