CVE-2007-5065: Code Injection
Published Sep 24, 2007
·Updated
PHP remote file inclusion vulnerability in admin.slideshow1.php in the Flash Slide Show (comslideshow) component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter.
Affected Software
2 affected components
webmaster-tips Flash Slide Show
Joomla joomla
Event History
Sep 24, 2007
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-5065?
CVE-2007-5065 has a moderate severity level due to the potential for remote code execution.
2
How do I fix CVE-2007-5065?
To fix CVE-2007-5065, ensure that you update the Flash Slide Show component to the latest version available or apply available patches.
3
What systems are affected by CVE-2007-5065?
CVE-2007-5065 affects Joomla! installations that use the Flash Slide Show component.
4
What is the exploit method for CVE-2007-5065?
CVE-2007-5065 can be exploited via remote file inclusion through the mosConfig_live_site parameter.
5
Who can exploit CVE-2007-5065?
CVE-2007-5065 can potentially be exploited by attackers with remote access to the vulnerable Joomla! system.