Unscored CVE-2007-5389 EUVD-2007-5365GHSA-g94m-gww6-6c2q

PHP remote file inclusion vulnerability in preview.php in the swMenuFree (com_swmenufree) 4.6 component for Joomla! allows remote attackers…

Published Oct 12, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in preview.php in the swMenuFree (com_swmenufree) 4.6 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter. NOTE: a reliable third party disputes this issue because preview.php tests a certain constant to prevent direct requests

References

37903 vdb-entry
3210 third-party-advisory
20071011 Joomla! swMenuFree 4.6 Component Remote File Include mailing-list
20071012 Re: Joomla! swMenuFree 4.6 Component Remote File Include mailing-list
20071011 false: Joomla! swMenuFree 4.6 Component Remote File Include mailing-list