CVE-2007-5457: Code Injection

Published Oct 14, 2007

Updated

Multiple PHP remote file inclusion vulnerabilities in Michael Dempfle Joomla Flash Uploader (comjfu or comjoomlaflashuploader) 2.5.1 component for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter to (1) install.joomlaflashuploader.php and (2) uninstall.joomlaflashuploader.php.

Affected Software

2 affected components

Joomla joomla

Michael Dempfle Joomla Flash Uploader=2.5.1

Event History

Oct 14, 2007

CVE Published

07:17 PM

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2007-5457?

CVE-2007-5457 is considered a high severity vulnerability due to its potential for remote code execution.

How do I fix CVE-2007-5457?

To fix CVE-2007-5457, you should upgrade the Michael Dempfle Joomla Flash Uploader component to a version that is not affected by this vulnerability.

What is affected by CVE-2007-5457?

CVE-2007-5457 affects the Michael Dempfle Joomla Flash Uploader component version 2.5.1 for Joomla!

Can CVE-2007-5457 be exploited remotely?

Yes, CVE-2007-5457 can be exploited remotely, allowing attackers to execute arbitrary PHP code.

What software should I check for CVE-2007-5457?

You should check Joomla installations that have the Michael Dempfle Joomla Flash Uploader component installed, specifically version 2.5.1.