CVE-2007-4781

administrator/index.php in the installer component (com_installer) in Joomla! 1.5 Beta1, Beta2, and RC1 allows remote authenticated administrators to upload arbitrary files to tmp/ via the "Upload Package File" functionality, which is accessible when com_installer is the value of the option parameter.

CVSS v2.0

6.6 MEDIUMAV:N/AC:H/Au:S/C:N/I:C/A:C

EPSS

5.19% chance of exploitation in the next 30 days, 92th percentile

Published

2007-09-10

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/4350

References

• CVE Record
• NVD entry

Related

• CVE-2007-4776
• CVE-2007-4790
• CVE-2007-4763
• CVE-2007-4802
• CVE-2007-4762
• CVE-2007-4803