CVE-2007-6105 - CVE House
Back to Database
Status published Medium CVE-2007-6105

Multiple PHP remote file inclusion vulnerabilities in TalkBack 2.2.7 allow...

Vulnerability Description

Multiple PHP remote file inclusion vulnerabilities in TalkBack 2.2.7 allow remote attackers to execute arbitrary PHP code via a URL in the (1) language_file parameter to (a) comments-display-tpl.php and (b) addons/separate-comments-mod/my-comments-display-tpl.php and the (2) config[comments_form_tpl] parameter to comments-display-tpl.php.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-6105

Credits & Attribution

No credits recorded in the NVD database.

References

More from talkback

View All →
CVE-2008-4346
Directory traversal vulnerability in TalkBack 2.3.6 and 2.3.6.4 allows remote...
High 7.5
CVE-2008-4115
TalkBack 2.3.6 allows remote attackers to obtain configuration information via...
Medium 5
CVE-2008-3371
Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other...
High 7.5

Affected Vendor

Affected Software

talkback
Vulnerable Versions:
2.2.7

Timeline

Official Publish: November 23rd, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.