PT-2021-8329 · Joomla · Joomla! Core

Nicola Bettini · Published 2021-06-21 · Updated 2021-06-25 · CVE-2010-1433

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Joomla! Core versions 1.5.0 through 1.5.15

Description The issue arises from the application's failure to properly verify user-supplied input, allowing attackers to upload arbitrary files. This can lead to the upload and execution of arbitrary code in the context of the webserver process, potentially facilitating unauthorized access or privilege escalation.

Recommendations For Joomla! Core versions 1.5.0 through 1.5.15, update to a version that properly verifies user-supplied input to prevent arbitrary file uploads.

Fix

Unrestricted File Upload

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2010-1433

Affected Products

Joomla! Core

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2010-1433 · Security Note
• https://developer.joomla.org/security-centre/310-20100423-core-installer-migration-script.html · Vendor Advisory
• https://acunetix.com/vulnerabilities/web/joomla-core-1-5-x-arbitrary-file-upload-1-5-0-1-5-15 · Note