CVE-2011-5134
Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla!
MEDIUM
com_jce
Composant
Description
Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla! allows remote authenticated users with the author privileges to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif. NOTE: some of these details are obtained from third party information.
Sévérité
6.0
Moyenne · CVSS 2.0
AV:N/AC:M/Au:S/C:P/I:P/A:P
Score retenu : NVD
| Source | Sévérité d'origine | CVSS |
|---|---|---|
| NVD | MEDIUM | 6.0 (v2.0) |
Produit et versions
- Produit
- com_jce
- Type
- Composant
- Corrigée dans
- Non précisée
- Publiée
- 30/08/2012
- Modifiée
- 16/06/2026
Versions concernées
- com_jce — jusqu'à 2.0.17
- com_jce — 2.0.0 – 2.0.0
- com_jce — 2.0.1 – 2.0.1
- com_jce — 2.0.2 – 2.0.2
- com_jce — 2.0.3 – 2.0.3
- com_jce — 2.0.4 – 2.0.4
- com_jce — 2.0.5 – 2.0.5
- com_jce — 2.0.6 – 2.0.6
- com_jce — 2.0.7 – 2.0.7
- com_jce — 2.0.8 – 2.0.8
- com_jce — 2.0.9 – 2.0.9
- com_jce — 2.0.10 – 2.0.10
6 autres
- com_jce — 2.0.11 – 2.0.11
- com_jce — 2.0.12 – 2.0.12
- com_jce — 2.0.13 – 2.0.13
- com_jce — 2.0.14 – 2.0.14
- com_jce — 2.0.15 – 2.0.15
- com_jce — 2.0.16 – 2.0.16
Sources
- NVD CVE-2011-5134 vu
Ces informations proviennent des sources ci-dessus ; CVE Oyer n'y ajoute aucune interprétation.
Historique
- Détectée via nvd26/09/2026 09:34 UTC