CVE-2014-1214

ALTO 8.8CVE-2014-1214 · Published 13/11/2019 · updated 17/06/2026

In breve

CVE-2014-1214 è una vulnerabilità ALTO (CVSS 8.8) che riguarda smart flash header (projoom).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 4.3%, superiore al 91.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
smart flash header projoom	`≤ 3.0.2`	No fix yet

Description

views/upload.php in the ProJoom Smart Flash Header (NovaSFH) component 3.0.2 and earlier for Joomla! allows remote attackers to upload and execute arbitrary files via a crafted (1) dest parameter and (2) arbitrary extension in the Filename parameter.

References

exchange.xforce.ibmcloud.com/vulnerabilities/91020 · Third Party Advisory
portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1214 · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free