PT-2019-7074
CVE-2014-1214
·
Publicado
2019-11-13
·
Atualizado
2019-11-18
Descrição por
CVSS 2.0
6.5
MédiaMétricasAV:N/AC:L/Au:S/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions
ProJoom Smart Flash Header (NovaSFH) component versions 3.0.2 and earlier for Joomla!
Description
The issue allows remote attackers to upload and execute arbitrary files. This is achieved via a crafted
dest parameter and an arbitrary extension in the Filename parameter.Recommendations
For ProJoom Smart Flash Header (NovaSFH) component versions 3.0.2 and earlier, consider disabling the upload functionality in the views/upload.php file until a patch is available. Restrict access to the
dest parameter and validate the Filename parameter to prevent arbitrary file uploads.Explorabilidade
Exploit
Correção
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾