CVE-2007-5410: Code Injection

Published Oct 12, 2007

Updated

PHP remote file inclusion vulnerability in admin.wmtrssreader.php in the webmaster-tips.net Flash RSS Reader (comwmtrssreader) 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter.

Affected Software

2 affected components

webmaster-tips Flash RSS Reader=1.0

Joomla joomla

Event History

Oct 12, 2007

CVE Published

06:17 PM

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-5410?

CVE-2007-5410 is considered a critical vulnerability due to its ability to allow remote code execution.

How do I fix CVE-2007-5410?

To fix CVE-2007-5410, update the Joomla! Flash RSS Reader component to the latest version and ensure proper validation of the mosConfig_live_site parameter.

What software is affected by CVE-2007-5410?

CVE-2007-5410 affects version 1.0 of the Flash RSS Reader component for Joomla! as well as Joomla! installations that utilize it.

What are the potential impacts of exploiting CVE-2007-5410?

Exploiting CVE-2007-5410 can lead to unauthorized access, data loss, and the execution of arbitrary PHP code on the affected server.

Who can exploit CVE-2007-5410?

Any remote attacker can exploit CVE-2007-5410 if the vulnerable component is installed and improperly configured.