Immunity Canvas: JOOMLAFLASHFUN_INCLUDE

Name| joomlaflashfuninclude ---|--- CVE| CVE-2007-4955 Exploit Pack| CANVAS Description| Joomla Flashfun Component Remote File Inclusion Notes| CVE Name: CVE-2007-4955 VENDOR: Joomla Repeatability: Infinite References: http://secunia.com/advisories/26799/ CVE Url:...

CVE-2007-4955

The CVE-2007-4955 entry describes a PHP remote file inclusion vulnerability in the Joomla! Flash Fun! extension (com_joomlaflashfun) version 1.0. The issue allows an attacker to remotely execute arbitrary PHP code by supplying a URL in the mosConfig_live_site parameter within admin.joomlaflashfun...