PT-2009-1952 · Joomla · Flash Tree Gallery

Noge · Published 2009-03-18 · Updated 2017-09-29 · CVE-2008-6482

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Flash Tree Gallery (com treeg) component version 1.0 for Joomla!

Description The issue allows remote attackers to execute arbitrary PHP code via the mosConfig live site parameter in the admin.treeg.php file when register globals is enabled.

Recommendations For Flash Tree Gallery (com treeg) component version 1.0, consider disabling the register globals setting to prevent exploitation. Additionally, restrict access to the admin.treeg.php file until a fix is available. Avoid using the mosConfig live site parameter in the affected component until the issue is resolved.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2008-6482

Affected Products

Flash Tree Gallery

References · 6

• 🔥 http://securityfocus.com/bid/32041 · Exploit
• 🔥 http://osvdb.org/49499 · Exploit
• 🔥 https://exploit-db.com/exploits/6928 · Exploit
• http://secunia.com/advisories/32520 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-6482 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46260 · Note