PT-2007-3386 · Joomla · Com Mosmedia

Gold_M · Publicado 2007-04-16 · Atualizado 2017-10-11 · CVE-2007-2043

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions com mosmedia versions 1.08 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig absolute path parameter to API endpoints such as "media.tab.php" or "media.divs.php".

Recommendations For com mosmedia versions 1.08 and earlier, consider restricting access to the "media.tab.php" and "media.divs.php" API endpoints until a patch is available. Avoid using the mosConfig absolute path parameter in these endpoints to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2007-2043

Produtos afetados

Com Mosmedia

Referências · 6

• 🔥 http://securityfocus.com/bid/23432 · Exploit
• 🔥 https://exploit-db.com/exploits/3714 · Exploit
• http://osvdb.org/37433 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2043 · Nota de Segurança
• http://vupen.com/english/advisories/2007/1357 · Nota
• http://osvdb.org/37434 · Nota