PT-2006-5271 · Joomla · Joomla!

Publicado 2006-08-31 · Atualizado 2021-10-04 · CVE-2006-4471

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Joomla! versions prior to 1.0.11

Description The issue concerns the Admin Upload Image functionality, which allows remote authenticated users to upload files outside of the intended directory via unspecified vectors.

Recommendations For versions prior to 1.0.11, update to version 1.0.11 or later to resolve the issue.

Correção

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2006-4471

Produtos afetados

Joomla!

Referências · 7

• https://exchange.xforce.ibmcloud.com/vulnerabilities/28630 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4471 · Nota
• http://joomla.org/content/view/1843/74 · Aviso do Fabricante
• http://secunia.com/advisories/21666 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-4471 · Nota de Segurança
• http://joomla.org/content/view/1841/78 · Aviso do Fabricante
• http://vupen.com/english/advisories/2006/3408 · Nota