CVE-2009-2637: Code Injection
Published Jul 28, 2009
·Updated
PHP remote file inclusion vulnerability in toolbarext.php in the BookLibrary (combooklibrary) component 1.5.2.4 Basic for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter.
Affected Software
2 affected components
Joomla joomla
Ordasoft Com Booklibrary=1.5.2.4
Event History
Jul 28, 2009
CVE Published
via MITRE·07:06 PM
Data Sourced
via MITRE·07:06 PM
Description
Data Sourced
07:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-2637?
CVE-2009-2637 is classified as a high severity vulnerability due to the potential for remote code execution.
2
How do I fix CVE-2009-2637?
To fix CVE-2009-2637, upgrade the BookLibrary component to a patched version that addresses this vulnerability.
3
What does CVE-2009-2637 affect?
CVE-2009-2637 specifically affects the BookLibrary component 1.5.2.4 Basic for Joomla!.
4
Can CVE-2009-2637 be exploited by remote attackers?
Yes, CVE-2009-2637 can be exploited by remote attackers to execute arbitrary PHP code.
5
What parameters are involved in CVE-2009-2637?
The vulnerable parameter in CVE-2009-2637 is the mosConfig_absolute_path, which can be manipulated for exploitation.