NVD

Id
40857  
Name
CVE-2013-5576  
Description
administrator/components/com_media/helpers/media.php in the media manager in Joomla! 2.5.x before 2.5.14 and 3.x before 3.1.5 allows remote authenticated users or remote attackers to bypass intended access restrictions and upload files with dangerous extensions via a filename with a trailing . (dot), as exploited in the wild in August 2013.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-10-09  
Modified Date
2013-11-30  
Seq
2013-5576  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
206410 40857 CVE-2013-5576 http://developer.joomla.org/security/563-20130801-core-unauthorised-uploads.html  View
206411 40857 CVE-2013-5576 http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=31626  View
206412 40857 CVE-2013-5576 [oss-security] 20130824 CVE request: Joomla unauthorised uploads before 2.5.14 / 3.1.5  View
206413 40857 CVE-2013-5576 [oss-security] 20130824 Re: CVE request: Joomla unauthorised uploads before 2.5.14 / 3.1.5  View
206414 40857 CVE-2013-5576 http://www.cso.com.au/article/523528/joomla_patches_file_manager_vulnerability_responsible_hijacked_websites/  View
206415 40857 CVE-2013-5576 27610  View
206416 40857 CVE-2013-5576 VU#639620  View
206417 40857 CVE-2013-5576 https://github.com/joomla/joomla-cms/commit/1ed07e257a2c0794ba19e864f7c5101e7e8c41d2  View
206418 40857 CVE-2013-5576 https://github.com/joomla/joomla-cms/commit/fa5645208eefd70f521cd2e4d53d5378622133d8  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
22994 JVNDB-2013-004569 Joomla! のメディアマネージャの administrator/components/com_media/helpers/media.php におけるアクセス制限を回避される脆弱性 Joomla! のメディアマネージャの administrator/components/com_media/helpers/media.php には、アクセス制限を回避され、危険な拡張子のファイルをアップロードされる脆弱性が存在します。 CVE-2013-5576 65518 CVE-2013-5576 40857 6.8 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-004569.html 2013-07-31 2013-10-31 View