CVE-2008-5793: Code Injection
Multiple PHP remote file inclusion vulnerabilities in the Clickheat - Heatmap stats (comclickheat) component 1.0.1 for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[mosConfigabsolutepath] parameter to (a) install.clickheat.php, (b) Cache.php and (c) ClickheatHeatmap.php in Recly/Clickheat/, and (d) Recly/common/GlobalVariables.php; and the (2) mosConfigabsolutepath parameter to (e) main.php and (f) main.php in includes/heatmap, and (g) includes/overview/main.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5793?
CVE-2008-5793 has been classified as a critical vulnerability due to the potential for remote code execution.
How do I fix CVE-2008-5793?
To fix CVE-2008-5793, update the Clickheat - Heatmap stats component to a version that addresses the remote file inclusion vulnerabilities.
Who is affected by CVE-2008-5793?
CVE-2008-5793 affects users of the Clickheat - Heatmap stats component version 1.0.1 for Joomla! .
What types of attacks can occur due to CVE-2008-5793?
Due to CVE-2008-5793, remote attackers can execute arbitrary PHP code on the affected system.
Is there a remediation for CVE-2008-5793?
Yes, remediation involves ensuring that you are not using version 1.0.1 of the Clickheat - Heatmap stats component and applying any available security patches.