CVE-2008-5790: Code Injection
Multiple PHP remote file inclusion vulnerabilities in the Recly!Competitions (comcompetitions) component 1.0 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[mosConfigabsolutepath] parameter to (a) add.php and (b) competitions.php in includes/competitions/, and the (2) mosConfigabsolutepath parameter to (c) includes/settings/settings.php.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Block external HTTP(S) access to the vulnerable component files: /components/com_competitions/includes/competitions/add.php, /components/com_competitions/includes/competitions/competitions.php, and /components/com_competitions/includes/settings/settings.php at the web server (e.g., webserver config or .htaccess) or at the perimeter firewall to prevent remote file inclusion.
- Operational
Inventory Joomla installations for the Recly!Competitions (com_competitions) component version 1.0. For any instance found, prioritize and isolate hosts exposing the files listed above and take the affected site(s) offline or segregate them from production until a vendor-provided fix is available.
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5790?
CVE-2008-5790 is considered a high severity vulnerability due to its potential for remote code execution.
How do I fix CVE-2008-5790?
To fix CVE-2008-5790, update the Recly!Competitions component to the latest version or apply any available security patches.
What systems are affected by CVE-2008-5790?
CVE-2008-5790 affects version 1.0 of the Recly!Competitions component for Joomla!.
What type of vulnerability is CVE-2008-5790?
CVE-2008-5790 is a remote file inclusion vulnerability that allows attackers to execute arbitrary PHP code.
What can attackers do with CVE-2008-5790?
Attackers exploiting CVE-2008-5790 can potentially execute arbitrary PHP code on the affected system.