CVE-2011-5148

Joomla! Component Module Simple File Upload 1.3 - Remote Code Execution

Severity Score

6.8

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Multiple incomplete blacklist vulnerabilities in the Simple File Upload (mod_simplefileuploadv1.3) module before 1.3.5 for Joomla! allow remote attackers to execute arbitrary code by uploading a file with a (1) php5, (2) php6, or (3) double (e.g. .php.jpg) extension, then accessing it via a direct request to the file in images/, as exploited in the wild in January 2012.

Mútiples vulnerabilidades de lista negra incompleta en el módulo Simple File Upload (mod_simplefileuploadv1.3) anteriores a v1.3.5 para Joomla! permite a atacantes remotos ejecutar código de su elección subiendo un archivo con la extensión (1) php5, (2) php6, o (3) doble extensión (ej. .php.jpg), para acceder al fichero mediante una solicitud directa en la ruta images/, como se ha explotado en enero de 2012.

*Credits: N/A

CVSS Scores

NISTv2 6.8

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2011-12-28 First Exploit
2012-08-31 CVE Reserved
2012-08-31 CVE Published
2024-08-07 CVE Updated
2024-09-19 EPSS Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CAPEC

References (9)

URL	Tag	Source
http://docs.joomla.org/Vulnerable_Extensions_List#Simple_File_Upload_1.3	X_refsource_confirm
http://wasen.net/index.php?option=com_content&view=article&id=87&Itemid=59	X_refsource_confirm
http://www.osvdb.org/78122	Vdb Entry
http://www.securityfocus.com/bid/51214	Vdb Entry
http://www.securityfocus.com/bid/51234	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/72023	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/18287	2011-12-28
http://www.exploit-db.com/exploits/18287	2024-08-07

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/47370	2017-08-29

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Wasen Search vendor "Wasen"	Mod Simplefileupload Search vendor "Wasen" for product "Mod Simplefileupload"	<= 1.3 Search vendor "Wasen" for product "Mod Simplefileupload" and version " <= 1.3"	-	Affected	in	Joomla Search vendor "Joomla"	Joomla\! Search vendor "Joomla" for product "Joomla\!"	*	-	Safe
Wasen Search vendor "Wasen"	Mod Simplefileupload Search vendor "Wasen" for product "Mod Simplefileupload"	1.0 Search vendor "Wasen" for product "Mod Simplefileupload" and version "1.0"	-	Affected	in	Joomla Search vendor "Joomla"	Joomla\! Search vendor "Joomla" for product "Joomla\!"	*	-	Safe
Wasen Search vendor "Wasen"	Mod Simplefileupload Search vendor "Wasen" for product "Mod Simplefileupload"	1.1 Search vendor "Wasen" for product "Mod Simplefileupload" and version "1.1"	-	Affected	in	Joomla Search vendor "Joomla"	Joomla\! Search vendor "Joomla" for product "Joomla\!"	*	-	Safe