PT-2007-5382 · Open Source Matters · Joomla!

Johannes Greil · Published 2007-08-08 · Updated 2018-10-15 · CVE-2007-4187

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Joomla! version 1.5 beta before RC1

Description The issue allows remote attackers to execute arbitrary PHP code via PHP sequences in the searchword parameter, related to default results.php in components/com search/views/search/tmpl/ and templates/beez/html/com search/search/.

Recommendations For Joomla! version 1.5 beta before RC1, consider restricting access to the com search component until a fix is available. As a temporary workaround, avoid using the searchword parameter in the affected API endpoint until the issue is resolved.

Fix

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2007-4187

Affected Products

Joomla!

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2007-4187 · Security Note
• http://securityreason.com/securityalert/2969 · Note
• http://joomlacode.org/gf/project/joomla/scmsvn/?action=browse&path=%2Fdevelopment%2Ftrunk%2Fcomponents%2Fcom_search%2Fviews%2Fsearch%2Fview.php&r1=7455&r2=7456 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4187 · Note
• http://osvdb.org/41260 · Note
• http://securityfocus.com/archive/1/474417/100/100/threaded · Note