PT-2007-6449 · Joomla · Com Mp3 Allopass

Noge

·

CVE-2007-5412

·

Published

2007-10-12

·

Updated

2017-09-29

CVSS v2.0

6.8

Medium

VectorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions: com mp3 allopass version 1.0
Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig live site parameter to specific PHP files, including (1) "allopass.php" and (2) "allopass-error.php".
Recommendations: For com mp3 allopass version 1.0, consider restricting access to the allopass.php and allopass-error.php files until a patch is available. Avoid using the mosConfig live site parameter in these files to minimize the risk of exploitation.

Exploit

Fix

Code Injection

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2007-5412

Affected Products

Com Mp3 Allopass