返回 CVE 瀏覽器

CVE-2007-1699

CRITICAL

10.0

CVSS Severity Score

EPSS Score0.1770%

EPSS Percentile17.76th

Published2007年3月27日

Last Modified2026年4月23日

Vulnerability Description

Multiple PHP remote file inclusion vulnerabilities in the SWmenu (com_swmenupro and com_swmenufree) 4.0 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to ImageManager/Classes/ImageManager.php under the (1) components/ or (2) administrator/components/ directory trees.

Affected Platforms (CPE)

📦

Joomla

Swmenu Component

= 4.0

📦

Mambo

Swmenu Component

= 4.0

References & Advisories

🔗 http://osvdb.org/38790

🔗 http://osvdb.org/38791

🔗 http://www.securityfocus.com/bid/23116

🔗 http://www.vupen.com/english/advisories/2007/1100

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/33204

🔗 https://www.exploit-db.com/exploits/3557

🔗 http://osvdb.org/38790

🔗 http://osvdb.org/38791

相關漏洞威脅

CVE-2007-023610.0

Double free vulnerability in the _ATPsndrsp function in Apple Mac OS X 10.4.8, and possibly other versions, allows remote attacker...

CVE-2007-182210.0

Alcatel-Lucent Lucent Technologies voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailbo...

CVE-2007-195910.0

Unspecified vulnerability in the process_cmdent function in command.cpp in TinyMUX before 2.4 has unknown impact and attack vector...

CVE-2007-025410.0

Format string vulnerability in the errors_create_window function in errors.c in xine-ui allows attackers to execute arbitrary code...