Joomla! FLEXIcontent Component Insecure Directory Permissions Vulnerability
BID:47160
Info
Joomla! FLEXIcontent Component Insecure Directory Permissions Vulnerability
| Bugtraq ID: | 47160 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 05 2011 12:00AM |
| Updated: | Apr 05 2011 12:00AM |
| Credit: | Vendor reported. |
| Vulnerable: |
FLEXIcontent FLEXIcontent 1.5.3c FLEXIcontent FLEXIcontent 1.5.3B |
| Not Vulnerable: |
FLEXIcontent FLEXIcontent 1.5.4 |
Discussion
Joomla! FLEXIcontent Component Insecure Directory Permissions Vulnerability
The FLEXIcontent component for Joomla! is prone to a security vulnerability because it sets insecure directory permissions.
A local attacker can exploit this issue to modify, create, or delete files contained in this directory.
Versions prior to FLEXIcontent 1.5.4 are vulnerable.
The FLEXIcontent component for Joomla! is prone to a security vulnerability because it sets insecure directory permissions.
A local attacker can exploit this issue to modify, create, or delete files contained in this directory.
Versions prior to FLEXIcontent 1.5.4 are vulnerable.
Exploit / POC
Joomla! FLEXIcontent Component Insecure Directory Permissions Vulnerability
Attackers can exploit this issue using readily available tools.
Attackers can exploit this issue using readily available tools.
Solution / Fix
Joomla! FLEXIcontent Component Insecure Directory Permissions Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Joomla! FLEXIcontent Component Insecure Directory Permissions Vulnerability
References:
References:
- FLEXIcontent 1.5.4 is finally out! (FLEXIcontent)
- FLEXIcontent Homepage (FLEXIcontent)
- Joomla! Homepage (Joomla!)