PT-2008-1605 · Open Source Matters · Joomla!

Armando Romeo + 1 · Publicado 2008-01-04 · Atualizado 2018-10-15 · CVE-2007-6642

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 1.5 RC4

Description The issue allows remote attackers to perform several malicious actions, including adding a Super Admin, uploading an extension containing arbitrary PHP code, and modifying the configuration as administrators.

Recommendations For versions prior to 1.5 RC4, update to version 1.5 RC4 or later to resolve the issue.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2007-6642

Produtos afetados

Joomla!

Referências · 10

• https://nvd.nist.gov/vuln/detail/CVE-2007-6642 · Nota de Segurança
• http://joomla.org/content/view/4335/116 · Nota
• http://secunia.com/advisories/29257 · Nota
• http://securityfocus.com/bid/28111 · Nota
• http://mandriva.com/security/advisories?name=MDVSA-2008:060 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6642 · Nota
• http://securityfocus.com/archive/1/485676/100/0/threaded · Nota
• http://securityreason.com/securityalert/3505 · Nota
• http://securitytracker.com/id?1019145 · Nota
• http://osvdb.org/41263 · Nota