PT-2007-3386 · Joomla · Com Mosmedia

Gold_M · Published 2007-04-16 · Updated 2017-10-11 · CVE-2007-2043

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions com mosmedia versions 1.08 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig absolute path parameter to API endpoints such as "media.tab.php" or "media.divs.php".

Recommendations For com mosmedia versions 1.08 and earlier, consider restricting access to the "media.tab.php" and "media.divs.php" API endpoints until a patch is available. Avoid using the mosConfig absolute path parameter in these endpoints to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2007-2043

Affected Products

Com Mosmedia

References · 6

• 🔥 http://securityfocus.com/bid/23432 · Exploit
• 🔥 https://exploit-db.com/exploits/3714 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-2043 · Security Note
• http://osvdb.org/37433 · Note
• http://vupen.com/english/advisories/2007/1357 · Note
• http://osvdb.org/37434 · Note