Description (CNA)
Joomla Extension - phoca.cz - Authenticated file upload in Phoca Downloads component < 6.1.3 - The Joomla extension Phoca Downloads is vulnerable to an authenticated arbitrary file upload that allows registered users uploading executable files and leads to full RCE.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| phoca.cz / phoca.cz Phoca Download extension for Joomla | affected 1.0-6.1.2 |
CWE
CWE-434
References
- https://www.phoca.cz/phocadownload
- https://mysites.guru/blog/phoca-download-authenticated-file-upload-rce/
ADP enrichment
No English description supplied.
No references supplied.