CVE-2007-4954: Joomla! JOOM12PIC Component

Medium severity, CVSS 6.8. EPSS: 28.7% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in admin.joom12pic.php in the joom12Pic (com_joom12pic) 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.

Affected products

• Joomla! JOOM12PIC Component: version 1.0 only

Published 2007-09-18. Last modified 2026-06-16.