Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla! allows remote authenticated users with the author privileges to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif. NOTE: some of these details are obtained from third party information.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2022-10-03T16:15:12
Updated: 2022-10-03T16:15:12
Reserved: 2022-10-03T00:00:00
Link: CVE-2011-5134
JSON object: View
NVD Information
Status : Analyzed
Published: 2012-08-30T22:55:04.387
Modified: 2012-09-13T04:00:00.000
Link: CVE-2011-5134
JSON object: View
Redhat Information
No data.
CWE