CVE-2007-4781

administrator/index.php in the installer component (com_installer) in Joomla!

published September 10, 2007

CVSS
—
EPSS
5%
Percentile
92.4
In the wild
Unconfirmed
What it is

administrator/index.php in the installer component (com_installer) in Joomla! 1.5 Beta1, Beta2, and RC1 allows remote authenticated administrators to upload arbitrary files to tmp/ via the "Upload Package File" functionality, which is accessible when com_installer is the value of the option parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05188 · 92.4th percentile
Published
2007-09-10T21:00Z
EPSS history
Timeline
  • 10 SEP 21:00Z
    administrator/index.php in the installer component (com_installer) in Joomla!
    cvelistv5