Joomla! Projoom NovaSFH Plugin 'upload.php' Arbitrary File Upload Vulnerability

Bugtraq ID:	65438
Class:	Input Validation Error
CVE:	CVE-2014-1214
Remote:	Yes
Local:	No
Published:	Dec 13 2013 12:00AM
Updated:	Dec 13 2013 12:00AM
Credit:	Yuri Kramarz
Vulnerable:	ProJoom Smart Flash Header 3.0.2
Not Vulnerable:	ProJoom Smart Flash Header 3.0.3

Joomla! Projoom NovaSFH Plugin 'upload.php' Arbitrary File Upload Vulnerability

Projoom NovaSFH plugin for Joomla! is prone to an arbitrary-file-upload vulnerability because it fails to adequately sanitize user-supplied input.

An attacker may leverage this issue to upload arbitrary files; this can result in arbitrary code execution within the context of the vulnerable application.

Projoom NovaSFH Plugin 3.0.2 is vulnerable; other versions may also be affected.

Joomla! Projoom NovaSFH Plugin 'upload.php' Arbitrary File Upload Vulnerability

An attacker can exploit this issue using browser or readily available tools.

Following exploit code is available:

• /data/vulnerabilities/exploits/65438.txt

Joomla! Projoom NovaSFH Plugin 'upload.php' Arbitrary File Upload Vulnerability

References:

• ProJoom Homepage (ProJoom)
  
• Smart Flash Header Homepage (ProJoom)
  
• Vulnerability title: Remote Code Execution in Projoom NovaSFH Plugin (Portcullis Security)