PT-2007-5921 · Open Source Matters · Joomla!

Silentz · Published 2007-09-10 · Updated 2017-09-29 · CVE-2007-4781

Positive Technologies (AI Summary)

CVSS v2.0

6.6

Medium

Base vector

AV:N/AC:H/Au:S/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Joomla! versions 1.5 Beta1 through 1.5 RC1

Description: The issue allows remote authenticated administrators to upload arbitrary files to the tmp/ directory via the "Upload Package File" functionality in the installer component. This is accessible when com installer is the value of the option parameter in the administrator/index.php file.

Recommendations: For Joomla! versions 1.5 Beta1 through 1.5 RC1, consider disabling the "Upload Package File" functionality in the com installer component until a fix is available. Restrict access to the tmp/ directory to minimize the risk of exploitation. Avoid using the option parameter with the value of com installer in the administrator/index.php file until the issue is resolved.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2007-4781

Affected Products

Joomla!

References · 6

• 🔥 https://exploit-db.com/exploits/4350 · Exploit
• 🔥 http://securityfocus.com/bid/25508 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-4781 · Security Note
• http://osvdb.org/45888 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4781 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36424 · Note