high8.8Public exploit code
CVE-2014-1214
views/upload.php in the ProJoom Smart Flash Header (NovaSFH) component 3.0.2 and earlier for Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Component Projoom NovaSFH 3.0.2 - 'upload.php' Arbitrary File Upload2013-12-13 · webapps · php · Verified
Impact
views/upload.php in the ProJoom Smart Flash Header (NovaSFH) component 3.0.2 and earlier for Joomla! allows remote attackers to upload and execute arbitrary files via a crafted (1) dest parameter and (2) arbitrary extension in the Filename parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Projoom | Smart Flash Header | through 3.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91020
- https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1214/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91020
- https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1214/