CVE-2007-5451

medium · 6.8

PHP remote file inclusion vulnerability in admin.color.php in the com_colorlab (aka com_color) 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.

6.8

CVSS

31.2%

EPSS (exploit prob.)

98th

EPSS percentile

2007-10-14

Published

AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

CWE-94

Affected products

Vendor	Product	Affected versions
com_colorlab	com_colorlab	1.0
joomla	joomla	all versions

Check a specific version with /api/v1/cve/match.

References

http://osvdb.org/40609
http://www.securityfocus.com/bid/26059
https://www.exploit-db.com/exploits/4524
http://osvdb.org/40609
http://www.securityfocus.com/bid/26059
https://www.exploit-db.com/exploits/4524

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-5451