CVE-2007-2144

Published: Apr 19, 2007Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

PHP remote file inclusion vulnerability in includes/CAltInstaller.php in the JoomlaPack (com_jpack) 1.0.4a2 RE component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.

Affected (1)

Products: Joomlapack: Joomlapack

Joomlapack

1 product

Joomlapack

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Joomlapack Joomlapack	Version 1.0.4a2_re

Related CWEs

CWE-94

Improper Control of Generation of Code ('Code Injection')

The product constructs all or part of a code segment using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the syntax or behavior of the intended code segment.

References (10)

http://osvdb.org/37573

Source: cve@mitre.org

http://www.securityfocus.com/bid/23529

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1429

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/33702

Source: cve@mitre.org

https://www.exploit-db.com/exploits/3753

Source: cve@mitre.org

http://osvdb.org/37573