medium6.8Public exploit code
CVE-2007-2089
Multiple PHP remote file inclusion vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo and Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! / Mambo Component New Article 1.1 - Remote File Inclusion2007-04-14 · webapps · php · Verified
Impact
Multiple PHP remote file inclusion vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter to com_articles.php in (1) components/ or (2) classes/html/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jx Development | Article Component | through 1.1 |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/archive/1/466059/100/0/threaded
- http://www.securityfocus.com/bid/23513
- http://www.vupen.com/english/advisories/2007/1394
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33663
- https://www.exploit-db.com/exploits/3736
- http://www.securityfocus.com/archive/1/466059/100/0/threaded
- http://www.securityfocus.com/bid/23513
- http://www.vupen.com/english/advisories/2007/1394
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33663
- https://www.exploit-db.com/exploits/3736