EUVD-2016-10636

Malware in sbrugna...

CVE-2016-9836

The file scanning mechanism of JFilterInput::isFileSafe in Joomla! CMS before 3.6.5 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to upload and execute files with the .php6, .php7, .phtml, and .phpt extensions. Additionally,...

CVE-2016-9836

The file scanning mechanism of JFilterInput::isFileSafe in Joomla! CMS before 3.6.5 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to upload and execute files with the ".php6", ".php7", ".phtml", and ".phpt" extensions...

PT-2016-7836

Name of the Vulnerable Software and Affected Versions Joomla! CMS versions prior to 3.6.5 Description The issue concerns the file scanning mechanism in Joomla! CMS, specifically the JFilterInput::isFileSafe function, which fails to account for alternative PHP file extensions when checking uploade...

CVE-2016-9836: Improper Access Control

The file scanning mechanism of JFilterInput::isFileSafe in Joomla! CMS before 3.6.5 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to upload and execute files with the .php6, .php7, .phtml, and .phpt extensions. Additionally,...