CVE

Id
65523  
CVE No.
CVE-2013-5576  
Status
Candidate  
Description
administrator/components/com_media/helpers/media.php in the media manager in Joomla! 2.5.x before 2.5.14 and 3.x before 3.1.5 allows remote authenticated users or remote attackers to bypass intended access restrictions and upload files with dangerous extensions via a filename with a trailing . (dot), as exploited in the wild in August 2013.  
Phase
Assigned (20130823)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
639222 65523 CVE-2013-5576 EXPLOIT-DB:27610  View
639223 65523 CVE-2013-5576 URL:http://www.exploit-db.com/exploits/27610  View
639224 65523 CVE-2013-5576 MLIST:[oss-security] 20130824 CVE request: Joomla unauthorised uploads before 2.5.14 / 3.1.5  View
639225 65523 CVE-2013-5576 URL:http://seclists.org/oss-sec/2013/q3/484  View
639226 65523 CVE-2013-5576 MLIST:[oss-security] 20130824 Re: CVE request: Joomla unauthorised uploads before 2.5.14 / 3.1.5  View
639227 65523 CVE-2013-5576 URL:http://seclists.org/oss-sec/2013/q3/486  View
639228 65523 CVE-2013-5576 MISC:http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=31626  View
639229 65523 CVE-2013-5576 MISC:http://www.cso.com.au/article/523528/joomla_patches_file_manager_vulnerability_responsible_hijacked_websites/  View
639230 65523 CVE-2013-5576 CONFIRM:http://developer.joomla.org/security/563-20130801-core-unauthorised-uploads.html  View
639231 65523 CVE-2013-5576 CONFIRM:https://github.com/joomla/joomla-cms/commit/1ed07e257a2c0794ba19e864f7c5101e7e8c41d2  View
639232 65523 CVE-2013-5576 CONFIRM:https://github.com/joomla/joomla-cms/commit/fa5645208eefd70f521cd2e4d53d5378622133d8  View
639233 65523 CVE-2013-5576 CERT-VN:VU#639620  View

Related JVN