Lucene search

K
cveMitreCVE-2007-6555
HistoryDec 28, 2007 - 12:46 a.m.

CVE-2007-6555

2007-12-2800:46:00
CWE-94
mitre
web.nvd.nist.gov
27
cve
php
file inclusion
vulnerability
joomla
remote execution
nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

0.02

Percentile

88.8%

PHP remote file inclusion vulnerability in modules/mod_pxt_latest.php in the mosDirectory (com_directory) 2.3.2 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[mosConfig_absolute_path] parameter.

Affected configurations

Nvd
Node
phil_taylormosdirectoryMatch2.3.2
VendorProductVersionCPE
phil_taylormosdirectory2.3.2cpe:2.3:a:phil_taylor:mosdirectory:2.3.2:*:*:*:*:*:*:*

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

High

EPSS

0.02

Percentile

88.8%

Related for CVE-2007-6555