CVE-2010-1433

2021-06-2122:13:29

CWE-434

redhat

www.cve.org

joomla

core vulnerability

arbitrary files

code execution

webserver process

unauthorized access

privilege escalation

cve-2010-1433

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

59.7%

JSON

Joomla! Core is prone to a vulnerability that lets attackers upload arbitrary files because the application fails to properly verify user-supplied input. An attacker can exploit this vulnerability to upload arbitrary code and run it in the context of the webserver process. This may facilitate unauthorized access or privilege escalation; other attacks are also possible. Joomla! Core versions 1.5.x ranging from 1.5.0 and up to and including 1.5.15 are vulnerable.

CNA Affected

[
  {
    "product": "Joomla",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Joomla core from 1.5.0 up to and including 1.5.15"
      }
    ]
  }
]