Lucene search

[email protected]CVE-2011-5134

HistoryOct 03, 2022 - 4:15 p.m.

CVE-2011-5134

2022-10-0316:15:12

[email protected]

web.nvd.nist.gov

cve-2011-5134

unrestricted file upload

jce component

joomla

vulnerability

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

75.1%

JSON

Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla! allows remote authenticated users with the author privileges to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif. NOTE: some of these details are obtained from third party information.

Affected configurations

NVD

Node

widgetfactorylimitedcom_jceRange≤2.0.17

widgetfactorylimitedcom_jceMatch2.0.0

widgetfactorylimitedcom_jceMatch2.0.1

widgetfactorylimitedcom_jceMatch2.0.2

widgetfactorylimitedcom_jceMatch2.0.3

widgetfactorylimitedcom_jceMatch2.0.4

widgetfactorylimitedcom_jceMatch2.0.5

widgetfactorylimitedcom_jceMatch2.0.6

widgetfactorylimitedcom_jceMatch2.0.7

widgetfactorylimitedcom_jceMatch2.0.8

widgetfactorylimitedcom_jceMatch2.0.9

widgetfactorylimitedcom_jceMatch2.0.10

widgetfactorylimitedcom_jceMatch2.0.11

widgetfactorylimitedcom_jceMatch2.0.12

widgetfactorylimitedcom_jceMatch2.0.13

widgetfactorylimitedcom_jceMatch2.0.14

widgetfactorylimitedcom_jceMatch2.0.15

widgetfactorylimitedcom_jceMatch2.0.16

AND

joomlajoomla\!

CPENameOperatorVersion
widgetfactorylimited:com_jcewidgetfactorylimited com jcele2.0.17
widgetfactorylimited:com_jcewidgetfactorylimited com jceeq2.0.0
widgetfactorylimited:com_jcewidgetfactorylimited com jceeq2.0.1
widgetfactorylimited:com_jcewidgetfactorylimited com jceeq2.0.2
widgetfactorylimited:com_jcewidgetfactorylimited com jceeq2.0.3
widgetfactorylimited:com_jcewidgetfactorylimited com jceeq2.0.4
widgetfactorylimited:com_jcewidgetfactorylimited com jceeq2.0.5
widgetfactorylimited:com_jcewidgetfactorylimited com jceeq2.0.6
widgetfactorylimited:com_jcewidgetfactorylimited com jceeq2.0.7
widgetfactorylimited:com_jcewidgetfactorylimited com jceeq2.0.8

CPE	Name	Operator	Version
widgetfactorylimited:com_jce	widgetfactorylimited com jce	le	2.0.17
widgetfactorylimited:com_jce	widgetfactorylimited com jce	eq	2.0.0
widgetfactorylimited:com_jce	widgetfactorylimited com jce	eq	2.0.1
widgetfactorylimited:com_jce	widgetfactorylimited com jce	eq	2.0.2
widgetfactorylimited:com_jce	widgetfactorylimited com jce	eq	2.0.3
widgetfactorylimited:com_jce	widgetfactorylimited com jce	eq	2.0.4
widgetfactorylimited:com_jce	widgetfactorylimited com jce	eq	2.0.5
widgetfactorylimited:com_jce	widgetfactorylimited com jce	eq	2.0.6
widgetfactorylimited:com_jce	widgetfactorylimited com jce	eq	2.0.7
widgetfactorylimited:com_jce	widgetfactorylimited com jce	eq	2.0.8

Rows per page:

1-10 of 181

References

secunia.com/advisories/47190

www.joomlacontenteditor.net/news/item/jce-2018-released?category_id=32

www.osvdb.org/77579

6 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:P/I:P/A:P

7.5 High

AI Score

Confidence

Low

0.004 Low

EPSS

Percentile

75.1%

JSON

Related for CVE-2011-5134

nvd1 prion1 cvelist1