CVE-2009-3817: Code Injection

Published Oct 28, 2009

Updated

PHP remote file inclusion vulnerability in doc/releasenote.php in the BookLibrary (combooklibrary) component 1.0 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter, a different vector than CVE-2009-2637. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected Software

2 affected components

Joomla Joomla\!

Ordasoft Com Booklibrary=1.0

Event History

Oct 28, 2009

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Data Sourced

10:30 AM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-3817?

CVE-2009-3817 is rated as high severity due to its potential for remote code execution.

How do I fix CVE-2009-3817?

To remediate CVE-2009-3817, update the BookLibrary component to the latest version or apply available security patches.

What software is affected by CVE-2009-3817?

CVE-2009-3817 affects the BookLibrary component 1.0 for Joomla!.

What type of vulnerability is CVE-2009-3817?

CVE-2009-3817 is a remote file inclusion vulnerability that allows arbitrary PHP code execution.

Can CVE-2009-3817 be exploited remotely?

Yes, CVE-2009-3817 can be exploited remotely by attackers to execute potentially harmful PHP code.