2 matches found
CVE-2007-5310
The CVE-2007-5310 entry describes a PHP remote file inclusion vulnerability in the webmaster-tips.net wmtportfolio 1.0 (com_wmtportfolio) Joomla! component. The flaw allows remote attackers to execute arbitrary PHP code via a URL provided to the mosConfig_absolute_path parameter, effectively enab...
CVE-2007-5309
CVE-2007-5309 concerns a PHP remote file inclusion in the Joomla! component com_wmtgallery (Webmaster-Tips.net Flash Image Gallery) via admin.wmtgallery.php. The root cause is improper handling of the mosConfig_live_site parameter, allowing an attacker to cause the server to include a remote PHP ...