CVE-2007-5451: Code Injection

Published Oct 14, 2007

Updated

PHP remote file inclusion vulnerability in admin.color.php in the comcolorlab (aka comcolor) 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfiglivesite parameter.

Affected Software

2 affected components

Com Colorlab Com Colorlab=1.0

Joomla joomla

Event History

Oct 14, 2007

CVE Published

06:17 PM

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-5451?

CVE-2007-5451 is classified as a high severity vulnerability due to the potential for remote code execution.

How do I fix CVE-2007-5451?

To mitigate CVE-2007-5451, upgrade to a version of the com_colorlab extension that has addressed this vulnerability.

What software is affected by CVE-2007-5451?

CVE-2007-5451 affects the com_colorlab component version 1.0 for Joomla! and its usage of the mosConfig_live_site parameter.

What type of vulnerability is CVE-2007-5451?

CVE-2007-5451 is a remote file inclusion vulnerability that can allow attackers to execute arbitrary PHP code.

Can CVE-2007-5451 be exploited remotely?

Yes, CVE-2007-5451 can be exploited remotely, allowing attackers to target affected systems without physical access.