Vulnerabilities > CVE-2007-1699 - Remote File Include vulnerability in Mambo SWMenu MosConfig_Absolute_Path Parameter

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
joomla
mambo
critical
exploit available
NVD
Published: 2007-03-27
Updated: 2017-10-11

Summary

Multiple PHP remote file inclusion vulnerabilities in the SWmenu (com_swmenupro and com_swmenufree) 4.0 component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to ImageManager/Classes/ImageManager.php under the (1) components/ or (2) administrator/components/ directory trees.

Vulnerable Configurations

Part Description Count
Application
Joomla
1
Application
Mambo
1

Exploit-Db

descriptionJoomla/Mambo Component SWmenuFree 4.0 RFI Vulnerability. CVE-2007-1699. Webapps exploit for php platform
fileexploits/php/webapps/3557.txt
idEDB-ID:3557
last seen2016-01-31
modified2007-03-23
platformphp
port
published2007-03-23
reporterCold Zero
sourcehttps://www.exploit-db.com/download/3557/
titleJoomla/Mambo Component SWmenuFree 4.0 RFI Vulnerability
typewebapps

References