Categories

Applications (222)
Blogs (7)
Content Management (148)
Customer Relationship (2)
Discussion Boards (29)
E-Commerce (14)
General Purpose Directories (2)
Image Galleries (18)
Mailing Lists (1)
Tips (3)
Vulnerabilities (337)
Access Bypass (50)
Cross Site Scripting (123)
Denial Of Service (2)
File Inclusion (51)
Information Disclosure (15)
Privilege Escalation (2)
Remote Command Execution (16)
Session Hijacking (2)
SQL Injection (130)
« PHPMailer Remote Command Execution
Wrapper.PHP for OsCommerce Local File Include Vulnerability »

Joomla JEvents Component Remote File Include

Published by TL Guan June 21st, 2007 in Content Management and File Inclusion.

Application: Joomla
Affected Version: Joomla JEvents Component 1.4.1
Vendor’s URL: http://www.joomla.org/
Bug Type: File Inclusion
Risk Level: Critical

Solution:
Edit the source code to make sure input is properly verified
Disable the component, remove it from directory and wait for updates or patches from vendor

0 Responses to “Joomla JEvents Component Remote File Include”

Feed for this Entry Trackback Address
  1. No Comments

Leave a Reply

You must login to post a comment.

« PHPMailer Remote Command Execution
Wrapper.PHP for OsCommerce Local File Include Vulnerability »

Subscribe

Latest

Archives



Valid XHTML 1.0 Transitional