CVE

Id
28138  
CVE No.
CVE-2007-4781  
Status
Candidate  
Description
administrator/index.php in the installer component (com_installer) in Joomla! 1.5 Beta1, Beta2, and RC1 allows remote authenticated administrators to upload arbitrary files to tmp/ via the "Upload Package File" functionality, which is accessible when com_installer is the value of the option parameter.  
Phase
Assigned (20070910)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
291857 28138 CVE-2007-4781 MILW0RM:4350  View
291858 28138 CVE-2007-4781 URL:http://www.milw0rm.com/exploits/4350  View
291859 28138 CVE-2007-4781 BID:25508  View
291860 28138 CVE-2007-4781 URL:http://www.securityfocus.com/bid/25508  View
291861 28138 CVE-2007-4781 OSVDB:45888  View
291862 28138 CVE-2007-4781 URL:http://osvdb.org/45888  View
291863 28138 CVE-2007-4781 XF:joomla-admin-index-file-upload(36424)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52255 JVNDB-2007-000945 PHP の iconv_substr() 関数における複数のサービス運用妨害 (DoS) の脆弱性 PHP の iconv_substr() 関数には、charset パラメータの文字列、および str パラメータの文字列を適切に処理をしないため、サービス運用妨害 (DoS) の脆弱性が存在します。 CVE-2007-4783 28138 5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000945.html  View