CVE-2007-5310: Code Injection

Published Oct 9, 2007

Updated

PHP remote file inclusion vulnerability in admin.wmtportfolio.php in the webmaster-tips.net wmtportfolio 1.0 (comwmtportfolio) component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter.

Affected Software

2 affected components

Joomla joomla

webmaster-tips.net Flash Image Gallery=1.0

Event History

Oct 9, 2007

CVE Published

09:17 PM

Oct 10, 2007

CVE Published

via MITRE·01:00 AM

Data Sourced

via MITRE·01:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-5310?

CVE-2007-5310 is classified as a high severity vulnerability due to its ability to allow remote code execution.

How do I fix CVE-2007-5310?

To fix CVE-2007-5310, update to the latest version of the wmtportfolio component for Joomla! to mitigate the risk.

What is affected by CVE-2007-5310?

CVE-2007-5310 affects the wmtportfolio 1.0 component for Joomla! that uses the admin.wmtportfolio.php file.

What kind of attacks does CVE-2007-5310 allow?

CVE-2007-5310 allows remote attackers to execute arbitrary PHP code on the affected systems.

Is there a workaround for CVE-2007-5310?

A potential workaround for CVE-2007-5310 is to disable the affected component until a patch can be applied.