Immunity Canvas: JOOMLAFLASHUP_INCLUDE

Name| joomlaflashupinclude ---|--- CVE| CVE-2007-5457 Exploit Pack| CANVAS Description| Joomla FlashUploader Component Remote File Inclusion Notes| CVE Name: CVE-2007-5457 VENDOR: Joomla Repeatability: Infinite References: http://securityreason.com/exploitalert/2886 CVE Url:...

CVE-2007-5457

CVE-2007-5457: Joomla Flash Uploader (com_jfu or com_joomla_flash_uploader) 2.5.1 is affected by multiple PHP remote file inclusion vulnerabilities. The root cause is improper handling of the mosConfig_absolute_path parameter, enabling an attacker to specify a URL to install.joomla_flash_uploader...