CVE

Id
25553  
CVE No.
CVE-2007-2196  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in jambook.php in the Jambook (com_Jambook) 1.0 beta7 module for Mambo and Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: this issue has been disputed by a reliable third party because the jambook.php protects against direct request.  
Phase
Assigned (20070424)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
255149 25553 CVE-2007-2196 BUGTRAQ:20070415 Joomla/Mambo Jambook v1.0 beta7 Rfi Vuln.  View
255150 25553 CVE-2007-2196 URL:http://www.securityfocus.com/archive/1/archive/1/465843/100/100/threaded  View
255151 25553 CVE-2007-2196 MISC:http://www.jxdevelopment.com/  View
255152 25553 CVE-2007-2196 VIM:20070417 False: Joomla/Mambo Jambook v1.0 beta7 Rfi Vuln.  View
255153 25553 CVE-2007-2196 URL:http://attrition.org/pipermail/vim/2007-April/001535.html  View
255154 25553 CVE-2007-2196 BID:23509  View
255155 25553 CVE-2007-2196 URL:http://www.securityfocus.com/bid/23509  View
255156 25553 CVE-2007-2196 OSVDB:34151  View
255157 25553 CVE-2007-2196 URL:http://www.osvdb.org/34151  View
255158 25553 CVE-2007-2196 SREASON:2603  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55047 JVNDB-2007-003739 LMS におけるクロスサイトスクリプティングの脆弱性 LAN Management System (LMS) には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2007-2198 25553 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003739.html  View