CVE

Id
52916  
CVE No.
CVE-2011-5004  
Status
Candidate  
Description
Unrestricted file upload vulnerability in models/importcsv.php in the Fabrik (com_fabrik) component before 2.1.1 for Joomla! allows remote authenticated users with Manager privileges to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.  
Phase
Assigned (20111224)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
560938 52916 CVE-2011-5004 MISC:http://www.vulnerability-lab.com/get_content.php?id=342  View
560939 52916 CVE-2011-5004 CONFIRM:http://www.ohloh.net/p/3417/commits/145749116  View
560940 52916 CVE-2011-5004 BID:50823  View
560941 52916 CVE-2011-5004 URL:http://www.securityfocus.com/bid/50823  View
560942 52916 CVE-2011-5004 OSVDB:77371  View
560943 52916 CVE-2011-5004 URL:http://www.osvdb.org/77371  View
560944 52916 CVE-2011-5004 SECUNIA:47036  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33292 JVNDB-2011-003532 3S CoDeSys におけるサービス運用妨害 (NULL ポインタデリファレンス) の脆弱性 3S CoDeSys の Control サービス内にある CmpWebServer.dll モジュールには、サービス運用妨害 (NULL ポインタデリファレンス) 状態となる脆弱性が存在します。 CVE-2011-5009 52916 5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003532.html  View