{"data":{"id":"CVE-2013-5576","cve_id":"CVE-2013-5576","title":"administrator/components/com_media/helpers/media.php in the media manager in Joomla!","summary":"administrator/components/com_media/helpers/media.php in the media manager in Joomla!","severity":"MEDIUM","cvss":{"score":6.8,"version":"2.0","vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","source":"nvd"},"published_at":"2013-10-09T14:54:26.780000Z","modified_at":"2026-06-16T23:59:02.613000Z","withdrawn_at":null,"is_joomla":true,"is_joomla_core":true,"relevance":"certain","product":"Joomla CMS","extension":{"type":null,"name":null},"sources":["nvd"],"source_count":1,"url":"https://cve.oyer.fr/cve/CVE-2013-5576","description":"administrator/components/com_media/helpers/media.php in the media manager in Joomla! 2.5.x before 2.5.14 and 3.x before 3.1.5 allows remote authenticated users or remote attackers to bypass intended access restrictions and upload files with dangerous extensions via a filename with a trailing . (dot), as exploited in the wild in August 2013.","cwe":["CWE-20"],"affected":[{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:2.5.0:*:*:*:*:*:*:*","version_start":"2.5.0","version_end":"2.5.0","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:2.5.1:*:*:*:*:*:*:*","version_start":"2.5.1","version_end":"2.5.1","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:2.5.2:*:*:*:*:*:*:*","version_start":"2.5.2","version_end":"2.5.2","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:2.5.3:*:*:*:*:*:*:*","version_start":"2.5.3","version_end":"2.5.3","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:2.5.4:*:*:*:*:*:*:*","version_start":"2.5.4","version_end":"2.5.4","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:2.5.5:*:*:*:*:*:*:*","version_start":"2.5.5","version_end":"2.5.5","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:2.5.6:*:*:*:*:*:*:*","version_start":"2.5.6","version_end":"2.5.6","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:2.5.7:*:*:*:*:*:*:*","version_start":"2.5.7","version_end":"2.5.7","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:2.5.8:*:*:*:*:*:*:*","version_start":"2.5.8","version_end":"2.5.8","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:2.5.9:*:*:*:*:*:*:*","version_start":"2.5.9","version_end":"2.5.9","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:2.5.10:*:*:*:*:*:*:*","version_start":"2.5.10","version_end":"2.5.10","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:2.5.11:*:*:*:*:*:*:*","version_start":"2.5.11","version_end":"2.5.11","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:2.5.12:*:*:*:*:*:*:*","version_start":"2.5.12","version_end":"2.5.12","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:2.5.13:*:*:*:*:*:*:*","version_start":"2.5.13","version_end":"2.5.13","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:3.0.0:*:*:*:*:*:*:*","version_start":"3.0.0","version_end":"3.0.0","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:3.0.1:*:*:*:*:*:*:*","version_start":"3.0.1","version_end":"3.0.1","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:3.0.2:*:*:*:*:*:*:*","version_start":"3.0.2","version_end":"3.0.2","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:3.0.3:*:*:*:*:*:*:*","version_start":"3.0.3","version_end":"3.0.3","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:3.0.4:*:*:*:*:*:*:*","version_start":"3.0.4","version_end":"3.0.4","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:3.1.0:*:*:*:*:*:*:*","version_start":"3.1.0","version_end":"3.1.0","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:3.1.1:*:*:*:*:*:*:*","version_start":"3.1.1","version_end":"3.1.1","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:3.1.2:*:*:*:*:*:*:*","version_start":"3.1.2","version_end":"3.1.2","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:3.1.3:*:*:*:*:*:*:*","version_start":"3.1.3","version_end":"3.1.3","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"},{"package":null,"product":"joomla!","vendor":"joomla","ecosystem":null,"cpe":"cpe:2.3:a:joomla:joomla\\!:3.1.4:*:*:*:*:*:*:*","version_start":"3.1.4","version_end":"3.1.4","version_end_inclusive":true,"fixed_version":null,"type":"core","source":"nvd"}],"references":[{"url":"http://developer.joomla.org/security/563-20130801-core-unauthorised-uploads.html","title":null,"source":"nvd"},{"url":"http://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=31626","title":null,"source":"nvd"},{"url":"http://seclists.org/oss-sec/2013/q3/484","title":null,"source":"nvd"},{"url":"http://seclists.org/oss-sec/2013/q3/486","title":null,"source":"nvd"},{"url":"http://www.cso.com.au/article/523528/joomla_patches_file_manager_vulnerability_responsible_hijacked_websites/","title":null,"source":"nvd"},{"url":"http://www.exploit-db.com/exploits/27610","title":"Exploit","source":"nvd"},{"url":"http://www.kb.cert.org/vuls/id/639620","title":"US Government Resource","source":"nvd"},{"url":"https://github.com/joomla/joomla-cms/commit/1ed07e257a2c0794ba19e864f7c5101e7e8c41d2","title":null,"source":"nvd"},{"url":"https://github.com/joomla/joomla-cms/commit/fa5645208eefd70f521cd2e4d53d5378622133d8","title":"Exploit, Patch","source":"nvd"}],"source_records":[{"source":"nvd","external_id":"CVE-2013-5576","url":"https://nvd.nist.gov/vuln/detail/CVE-2013-5576","severity":"MEDIUM","cvss_score":6.8,"cvss_vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","cvss_version":"2.0","first_seen_at":"2026-09-26T09:34:09.092442Z","last_seen_at":"2026-09-26T09:34:09.092442Z"}],"history":[{"at":"2026-09-26T09:34:09.092442Z","event":"created","source":"nvd","detail":"Détectée via nvd"}]}}