CVE-2011-5134

Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla!

published August 30, 2012

CVSS
—
EPSS
1%
Percentile
63.9
In the wild
Unconfirmed
What it is

Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla! allows remote authenticated users with the author privileges to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif. NOTE: some of these details are obtained from third party information.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01055 · 63.9th percentile
Published
2012-08-30T22:00Z
EPSS history
Timeline
  • 30 AUG 22:00Z
    Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla!
    cvelistv5