CVE-2014-1214

views/upload.php in the ProJoom Smart Flash Header (NovaSFH) component 3.0.2 and earlier for Joomla!

published November 13, 2019

CVSS
—
EPSS
4%
Percentile
91.1
In the wild
Unconfirmed
What it is

views/upload.php in the ProJoom Smart Flash Header (NovaSFH) component 3.0.2 and earlier for Joomla! allows remote attackers to upload and execute arbitrary files via a crafted (1) dest parameter and (2) arbitrary extension in the Filename parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04317 · 91.1th percentile
Published
2019-11-13T20:36Z
EPSS history
Timeline
  • 13 NOV 20:36Z
    views/upload.php in the ProJoom Smart Flash Header (NovaSFH) component 3.0.2 and earlier for Joomla!
    cvelistv5