6.8

CVE-2011-5148

Multiple incomplete blacklist vulnerabilities in the Simple File Upload (mod_simplefileuploadv1.3) module before 1.3.5 for Joomla! allow remote attackers to execute arbitrary code by uploading a file with a (1) php5, (2) php6, or (3) double (e.g. .php.jpg) extension, then accessing it via a direct request to the file in images/, as exploited in the wild in January 2012.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Wasen ≫ Mod Simplefileupload Version <= 1.3
Wasen ≫ Mod Simplefileupload Version1.0
Wasen ≫ Mod Simplefileupload Version1.1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 4.88% 0.909
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 6.8 8.6 6.4
AV:N/AC:M/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://docs.joomla.org/Vulnerable_Extensions_List#Simple_File_Upload_1.3
http://secunia.com/advisories/47370
Vendor Advisory
http://wasen.net/index.php?option=com_content&view=article&id=87&Itemid=59
http://www.exploit-db.com/exploits/18287
http://www.osvdb.org/78122
http://www.securityfocus.com/bid/51214
http://www.securityfocus.com/bid/51234
https://exchange.xforce.ibmcloud.com/vulnerabilities/72023