PT-2008-1605 · Open Source Matters · Joomla!

Armando Romeo + 1 · Published 2008-01-04 · Updated 2018-10-15 · CVE-2007-6642

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 1.5 RC4

Description The issue allows remote attackers to perform several malicious actions, including adding a Super Admin, uploading an extension containing arbitrary PHP code, and modifying the configuration as administrators.

Recommendations For versions prior to 1.5 RC4, update to version 1.5 RC4 or later to resolve the issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2007-6642

Affected Products

Joomla!

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2007-6642 · Security Note
• http://mandriva.com/security/advisories?name=MDVSA-2008:060 · Vendor Advisory
• http://joomla.org/content/view/4335/116 · Note
• http://secunia.com/advisories/29257 · Note
• http://securityfocus.com/bid/28111 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-6642 · Note
• http://securityfocus.com/archive/1/485676/100/0/threaded · Note
• http://securityreason.com/securityalert/3505 · Note
• http://securitytracker.com/id?1019145 · Note
• http://osvdb.org/41263 · Note