CVE-2007-5309: Joomla! Joomla

Medium severity, CVSS 6.8. EPSS: 5.8% chance of exploitation in the next 30 days.

PHP remote file inclusion vulnerability in admin.wmtgallery.php in the webmaster-tips.net Flash Image Gallery (com_wmtgallery) 1.0 component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_live_site parameter.

Affected products

• Joomla! Joomla: any version
• Webmaster-Tips.net Flash Image Gallery: version 1.0 only

Published 2007-10-09. Last modified 2026-06-16.