CVE-2007-2089 EXPLOIT
6.8
MEDIUM · CVSS 2.0 · EPSS 5.6% (pctl 93)
Patch early
A public exploit exists.
Description
Multiple PHP remote file inclusion vulnerabilities in the Jx Development Article 1.1 and earlier component for Mambo and Joomla! allow remote attackers to execute arbitrary PHP code via a URL in the absolute_path parameter to com_articles.php in (1) components/ or (2) classes/html/.
Scoring
| CVSS | 6.8 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
| EPSS | 5.64% — more likely to be exploited than 93% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2007-04-18 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| jx development | article component |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | Joomla! / Mambo Component New Article 1.1 - Remote File Inclusion | 2007-04-14 |
References
- http://www.securityfocus.com/archive/1/466059/100/0/threaded
- http://www.securityfocus.com/bid/23513
- http://www.vupen.com/english/advisories/2007/1394
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33663
- https://www.exploit-db.com/exploits/3736
- http://www.securityfocus.com/archive/1/466059/100/0/threaded
- http://www.securityfocus.com/bid/23513
- http://www.vupen.com/english/advisories/2007/1394
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33663
- https://www.exploit-db.com/exploits/3736
→ the Explorer · watch your stack · NVD