Joomla! Flash Magazine Deluxe Component Insecure Directory Permissions Vulnerability
BID:48834
Info
Joomla! Flash Magazine Deluxe Component Insecure Directory Permissions Vulnerability
| Bugtraq ID: | 48834 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Jul 21 2011 12:00AM |
| Updated: | Jul 21 2011 12:00AM |
| Credit: | Joomla! VEL team |
| Vulnerable: |
Joomla Flash Magazine Deluxe 2.1.3 |
| Not Vulnerable: |
Joomla Flash Magazine Deluxe 2.1.4 |
Discussion
Joomla! Flash Magazine Deluxe Component Insecure Directory Permissions Vulnerability
The Flash Magazine Deluxe component for Joomla! is prone to a security vulnerability because it sets insecure directory permissions.
A local attacker can exploit this issue to modify, create, or delete files contained in this directory.
Versions prior to Flash Magazine Deluxe 2.1.4 are vulnerable.
The Flash Magazine Deluxe component for Joomla! is prone to a security vulnerability because it sets insecure directory permissions.
A local attacker can exploit this issue to modify, create, or delete files contained in this directory.
Versions prior to Flash Magazine Deluxe 2.1.4 are vulnerable.
Exploit / POC
Joomla! Flash Magazine Deluxe Component Insecure Directory Permissions Vulnerability
Attackers can exploit this issue using readily available tools.
Attackers can exploit this issue using readily available tools.
Solution / Fix
Joomla! Flash Magazine Deluxe Component Insecure Directory Permissions Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Joomla! Flash Magazine Deluxe Component Insecure Directory Permissions Vulnerability
References:
References:
- FlashMagazine Deluxe 2.1.4 Security Release (Joomla)
- Joomla! Homepage (Joomla!)