PT-2018-18020 · Joomla · Joomla! Proclaim

Ihsan Sencan · Published 2018-02-22 · Updated 2018-03-13 · CVE-2018-7316

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Joomla! Proclaim version 9.1.1

Description The issue allows for an Arbitrary File Upload in the Proclaim component for Joomla!. This is achieved via a mediafileform action.

Recommendations For Joomla! Proclaim version 9.1.1, update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to the mediafileform action to minimize the risk of exploitation.

Exploit

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2018-7316

Affected Products

Joomla! Proclaim

References · 3

• 🔥 https://exploit-db.com/exploits/44164 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-7316 · Security Note
• https://osv.dev/vulnerability/CVE-2018-7316 · Vendor Advisory