CVE-2014-1214
views/upload.php in the ProJoom Smart Flash Header (NovaSFH) component 3.0.2 and earlier for Joomla! allows remote attackers to upload and execute arbitrary files via a crafted (1) dest parameter and (2) arbitrary extension in the Filename parameter.
- Score
- CVSS 3.1 8.8 High
- Status
- Modified - cve@mitre.org
- Published
- 2019-11-13
- Last modified
- 2024-08-06
- Weaknesses
- CWE-434
Affected products
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/91020
- https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1214/
