VulnerabilityModified
CVE-2007-2319
PHP remote file inclusion vulnerability in the AutoStand 1.1 and earlier module for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to mod_as_category.php in (1) modules/mod_as_category/…
MEDIUM 6.8EPSS 2.30%
Does this matter?
Lower severity and a low EPSS score (2.30%). Track it; it rarely justifies an emergency change on its own.
Description
PHP remote file inclusion vulnerability in the AutoStand 1.1 and earlier module for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to mod_as_category.php in (1) modules/mod_as_category/ or (2) modules/.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 2.30% probability · 82th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-94
- Affected
- autostand category/autostand category
- Source
- cve@mitre.org
References
- http://osvdb.org/35753
- http://www.securityfocus.com/bid/23490Exploit
- http://www.vupen.com/english/advisories/2007/1392
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33660
- https://www.exploit-db.com/exploits/3734
- http://osvdb.org/35753
- http://www.securityfocus.com/bid/23490Exploit
- http://www.vupen.com/english/advisories/2007/1392
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33660
- https://www.exploit-db.com/exploits/3734
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.