CVE-2009-2634: Code Injection

Published Jul 28, 2009

Updated

PHP remote file inclusion vulnerability in toolbarext.php in the MediaLibrary (commedialibrary) component 1.5.3 Basic for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter.

Affected Software

2 affected components

Joomla joomla

Ordasoft Com Medialibrary=1.5.3

Event History

Jul 28, 2009

CVE Published

via MITRE·07:06 PM

Data Sourced

via MITRE·07:06 PM

Description

Data Sourced

07:30 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-2634?

CVE-2009-2634 is considered a critical vulnerability due to its potential for arbitrary code execution.

How do I fix CVE-2009-2634?

To fix CVE-2009-2634, upgrade to a patched version of the MediaLibrary component or implement security measures to validate and sanitize input.

What software is affected by CVE-2009-2634?

CVE-2009-2634 affects the MediaLibrary component version 1.5.3 Basic for Joomla!.

Can CVE-2009-2634 be exploited remotely?

Yes, CVE-2009-2634 can be exploited remotely through a specially crafted URL.

What kind of attacks can CVE-2009-2634 facilitate?

CVE-2009-2634 can facilitate remote file inclusion attacks, allowing unauthorized execution of malicious PHP code.