NVD

Id
56318  
Name
CVE-2007-4187  
Description
Multiple eval injection vulnerabilities in the com_search component in Joomla! 1.5 beta before RC1 (aka Mapya) allow remote attackers to execute arbitrary PHP code via PHP sequences in the searchword parameter, related to default_results.php in (1) components/com_search/views/search/tmpl/ and (2) templates/beez/html/com_search/search/.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-08-07  
Modified Date
2008-11-15  
Seq
2007-4187  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
286817 56318 CVE-2007-4187 http://joomlacode.org/gf/project/joomla/scmsvn/?action=browse&path=%2Fdevelopment%2Ftrunk%2Fcomponents%2Fcom_search%2Fviews%2Fsearch%2Fview.php&r1=7455&r2=7456  View
286818 56318 CVE-2007-4187 2969  View
286819 56318 CVE-2007-4187 20070722 SEC Consult SA-20070722-0 :: Remote command execution in Joomla! CMS  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55531 JVNDB-2007-004223 Joomla! の com_search コンポーネントにおける任意の PHP コードを実行される脆弱性 Joomla! の com_search コンポーネントは、Eval インジェクションにより、任意の PHP コードを実行される脆弱性が存在します。 CVE-2007-4187 27542 CVE-2007-4187 56318 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004223.html 2007-08-07 2012-09-25 View