msgid:[email protected][email protected]&[email protected]&folder=\\3APA3A\Bugtraq&subject=Related%20POC%20for%20JCE%20Joomla%20Extension%20<%3D2

After release of vendor supplied patch for JCE's vulnerabilities, AmnPardaz is planning to submit a related POC for the educational purpose in Perl and PHP after one month. The Exploit for JCE Joomla Extension (Auto Shell Uploader) V0.1 - PHP Version is going to be used for remote file upload. The vulnerability is in JCE 2.0.10 and prior versions might also be affected. The exploitation is through the browser, and the original advisory can be found at http://www.bugreport.ir/index_78.htm. Mostafa Azizi has coded it with a CVSS2 Base Score of 7.5