CVE

Id
28746  
CVE No.
CVE-2007-5389  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in preview.php in the swMenuFree (com_swmenufree) 4.6 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: a reliable third party disputes this issue because preview.php tests a certain constant to prevent direct requests.  
Phase
Assigned (20071011)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
300355 28746 CVE-2007-5389 BUGTRAQ:20071011 Joomla! swMenuFree 4.6 Component Remote File Include  View
300356 28746 CVE-2007-5389 URL:http://www.securityfocus.com/archive/1/archive/1/482100/100/0/threaded  View
300357 28746 CVE-2007-5389 BUGTRAQ:20071012 Re: Joomla! swMenuFree 4.6 Component Remote File Include  View
300358 28746 CVE-2007-5389 URL:http://www.securityfocus.com/archive/1/archive/1/482165/100/0/threaded  View
300359 28746 CVE-2007-5389 VIM:20071011 false: Joomla! swMenuFree 4.6 Component Remote File Include  View
300360 28746 CVE-2007-5389 URL:http://www.attrition.org/pipermail/vim/2007-October/001825.html  View
300361 28746 CVE-2007-5389 OSVDB:37903  View
300362 28746 CVE-2007-5389 URL:http://osvdb.org/37903  View
300363 28746 CVE-2007-5389 SREASON:3210  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
55809 JVNDB-2007-004501 HP Select Identity における不特定のアクセス権を取得される脆弱性 HP Select Identity には、不特定のアクセス権を取得される脆弱性が存在します。 CVE-2007-5391 28746 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004501.html  View