QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2013-5576

Back to search

CVE-2013-5576

Published: Oct 9, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

administrator/components/com_media/helpers/media.php in the media manager in Joomla! 2.5.x before 2.5.14 and 3.x before 3.1.5 allows remote authenticated users or remote attackers to bypass intended access restrictions and upload files with dangerous extensions via a filename with a trailing . (dot), as exploited in the wild in August 2013.

VendorProductVersions

n/a

n/a

affected
n/a

References

27610
exploit
x_refsource_EXPLOIT-DB
VU#639620
third-party-advisory
x_refsource_CERT-VN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now