CVE-2013-5576

Published Oct 9, 2013

Last updated 11 years ago

Overview

Description: administrator/components/com_media/helpers/media.php in the media manager in Joomla! 2.5.x before 2.5.14 and 3.x before 3.1.5 allows remote authenticated users or remote attackers to bypass intended access restrictions and upload files with dangerous extensions via a filename with a trailing . (dot), as exploited in the wild in August 2013.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 6.8
Impact score: 6.4
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-20

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:joomla:joomla\\!:2.5.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "23266955-F1A6-4A06-AC39-6DDCA89042D3"
          },
          {
            "criteria": "cpe:2.3:a:joomla:joomla\\!:2.5.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "500F31F1-59C7-4FC1-9F33-5868095147A5"
          },
          {
            "criteria": "cpe:2.3:a:joomla:joomla\\!:2.5.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B2ED09A7-6F6F-4D8E-B1C8-9F02587292A2"
          },
          {
            "criteria": "cpe:2.3:a:joomla:joomla\\!:2.5.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DB41BDFF-76E2-47F7-933C-BA1B62BEEB60"
          },
          {
            "criteria": "cpe:2.3:a:joomla:joomla\\!:2.5.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FB16BDD1-C100-46AD-B0BB-699E32BF7FCC"
          },
          {
            "criteria": "cpe:2.3:a:joomla:joomla\\!:2.5.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "287DD122-A85D-4B55-97AC-5861157A177E"
          },
          {
            "criteria": "cpe:2.3:a:joomla:joomla\\!:2.5.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "98C4C245-C895-450C-B319-D0A11AA6F4B7"
          },
          {
            "criteria": "cpe:2.3:a:joomla:joomla\\!:2.5.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "194B27E6-49C4-409F-B727-38E5C904CD3C"
          },
          {
            "criteria": "cpe:2.3:a:joomla:joomla\\!:2.5.8:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BFFF133F-44AF-46FF-9A62-272D0A10C539"
          },
          {
            "criteria": "cpe:2.3:a:joomla:joomla\\!:2.5.9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "60787DEA-EA05-411C-BFFB-DB061D28BE9F"
          },
          {
            "criteria": "cpe:2.3:a:joomla:joomla\\!:2.5.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F24DA6BF-5321-4E54-B2BA-7573CCD2FA01"
          },
          {
            "criteria": "cpe:2.3:a:joomla:joomla\\!:2.5.11:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F968BB79-8712-4C2D-AF77-B4B57862CB30"
          },
          {
            "criteria": "cpe:2.3:a:joomla:joomla\\!:2.5.12:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AC7A5257-5617-43CC-AFA8-5FED7FCCFE38"
          },
          {
            "criteria": "cpe:2.3:a:joomla:joomla\\!:2.5.13:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "407C8BD8-B870-43D3-B735-9D7B52B1012A"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:joomla:joomla\\!:3.0.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "795E7538-038C-42D7-B4A8-BED0F120B605"
          },
          {
            "criteria": "cpe:2.3:a:joomla:joomla\\!:3.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "BC38EBE5-69C4-4F10-9AED-4E7E51B19BA5"
          },
          {
            "criteria": "cpe:2.3:a:joomla:joomla\\!:3.0.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E760A5AA-299D-47EA-895F-B9CA212D8BAF"
          },
          {
            "criteria": "cpe:2.3:a:joomla:joomla\\!:3.0.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "19CF53BD-6A52-41D3-8BB3-B08AC81C65E5"
          },
          {
            "criteria": "cpe:2.3:a:joomla:joomla\\!:3.0.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "23070D86-E104-4A93-84EA-5B23952B6A0A"
          },
          {
            "criteria": "cpe:2.3:a:joomla:joomla\\!:3.1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FE739F2A-795E-4721-A36D-BC269A6BC03A"
          },
          {
            "criteria": "cpe:2.3:a:joomla:joomla\\!:3.1.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DE74090E-8F37-442E-A29C-DE41898291C3"
          },
          {
            "criteria": "cpe:2.3:a:joomla:joomla\\!:3.1.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4ECDCEDF-7FFD-48C4-B655-0E8C03BB36FD"
          },
          {
            "criteria": "cpe:2.3:a:joomla:joomla\\!:3.1.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6037D413-3356-4801-8886-57D990DC25A7"
          },
          {
            "criteria": "cpe:2.3:a:joomla:joomla\\!:3.1.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "80A2FDC8-9123-49BC-8A2B-719192913172"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References