Record summary

CVE-2007-4955 has a selected CVSS score of 6.8; EIP currently links 1 catalogued exploit.

Description

PHP remote file inclusion vulnerability in admin.joomlaflashfun.php in the Flash Fun! (com_joomlaflashfun) 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBJoomla! Component flash fun! 1.0 - Remote File InclusionExploitDB exploitby MorganNot analyzed1 file
ExploitDB

PoC details

References

5