Description

The Admin Upload Image functionality in Joomla! before 1.0.11 allows remote authenticated users to upload files outside of the /images/stories/ directory via unspecified vectors.

Remediation

References

CVE-2006-4471

Related Vulnerabilities

EspoCRM Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2014-7985)

Mailman Other Vulnerability (CVE-2006-2191)

WordPress 2.5 Cookie Integrity Protection Unauthorized Access Vulnerability (0.6.2 - 2.5)

Perl CVE-2016-6185 Vulnerability (CVE-2016-6185)

WordPress Plugin Allopass for WP Cross-Site Scripting (1.0.7)

Severity

Medium

Classification

CVE-2006-4471 CWE-434

Tags

Missing Update Known Vulnerabilities