high7.5Public exploit code
CVE-2007-2043
Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia (com_mosmedia) 1.08 and earlier module for Mambo and Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Component mosmedia 1.0.8 - Remote File Inclusion2007-04-11 · webapps · php · Verified
Impact
Multiple PHP remote file inclusion vulnerabilities in the Avant-Garde Solutions MOSMedia (com_mosmedia) 1.08 and earlier module for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) media.tab.php or (2) media.divs.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Avant-Garde Solutions | Mosmedia | through 1.0.8 |
References
- NVD record
- CVE.org record
- http://osvdb.org/37433
- http://osvdb.org/37434
- http://www.securityfocus.com/bid/23432
- http://www.vupen.com/english/advisories/2007/1357
- https://www.exploit-db.com/exploits/3714
- http://osvdb.org/37433
- http://osvdb.org/37434
- http://www.securityfocus.com/bid/23432
- http://www.vupen.com/english/advisories/2007/1357
- https://www.exploit-db.com/exploits/3714