Joomla Flash Uploader

joomla_flash_uploader

Vendor: Michael Dempfle • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2007-5457

2Joomla

Michael Dempfle

2Joomla

Joomla Flash Uploader

Apr 23, 2026

Oct 14, 2007

N/A· v4

N/A· v3

6.8 MEDIUM· v2

Multiple PHP remote file inclusion vulnerabilities in Michael Dempfle Joomla Flash Uploader (com_jfu or com_joomla_flash_uploader) 2.5.1 component for Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) install.joomla_flash_uploader.php and (2) uninstall.joomla_flash_uploader.php.Show less