| Package | Affected versions | Patched versions |
|---|---|---|
| smart flash header | ≤ 3.0.2 |
views/upload.php in the ProJoom Smart Flash Header (NovaSFH) component 3.0.2 and earlier for Joomla! allows remote attackers to upload and execute arbitrary files via a crafted (1) dest parameter and (2) arbitrary extension in the Filename parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free