Remote file inclusion

2007-04-2621:19:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

High

0.047 Low

EPSS

Percentile

92.7%

JSON

PHP remote file inclusion vulnerability in the AutoStand 1.1 and earlier module for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to mod_as_category.php in (1) modules/mod_as_category/ or (2) modules/.

CPENameOperatorVersion
autostand_categoryle1.1

CPE	Name	Operator	Version
	autostand_category	le	1.1

References

osvdb.org/35753

www.securityfocus.com/bid/23490

www.vupen.com/english/advisories/2007/1392

exchange.xforce.ibmcloud.com/vulnerabilities/33660

www.exploit-db.com/exploits/3734