PT-2019-7074
CVE-2014-1214
·
تاريخ النشر
2019-11-13
·
تاريخ التحديث
2019-11-18
الوصف من
CVSS 2.0
6.5
متوسطةالمقاييسAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
ProJoom Smart Flash Header (NovaSFH) component versions 3.0.2 and earlier for Joomla!
Description
The issue allows remote attackers to upload and execute arbitrary files. This is achieved via a crafted
dest parameter and an arbitrary extension in the Filename parameter.Recommendations
For ProJoom Smart Flash Header (NovaSFH) component versions 3.0.2 and earlier, consider disabling the upload functionality in the views/upload.php file until a patch is available. Restrict access to the
dest parameter and validate the Filename parameter to prevent arbitrary file uploads. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾