CVE-2007-4781

administrator/index.php in the installer component (com_installer) in Joomla! 1.5 Beta1, Beta2, and RC1 allows remote authenticated administrators to upload arbitrary files to tmp/ via the "Upload Package File" functionality, which is accessible when com_installer is the value of the option parameter.

Link	Resource
http://www.securityfocus.com/bid/25508	Exploit Patch
http://osvdb.org/45888
https://exchange.xforce.ibmcloud.com/vulnerabilities/36424
https://www.exploit-db.com/exploits/4350

Configuration 1

cpe:2.3:a:joomla:joomla:1.5.0_rc1:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.5.0_beta2:*:*:*:*:*:*:* cpe:2.3:a:joomla:joomla:1.5.0_beta1:*:*:*:*:*:*:*

---

Published : 2007-09-10 09:17

Updated : 2017-09-29 01:29

---

NVD link : CVE-2007-4781

Mitre link : CVE-2007-4781

No products.

CWE-20