Joomla XCloner - Backup and Restore Component Multiple Security Vulnerablities

Bugtraq ID:	70953
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 06 2014 12:00AM
Updated:	Nov 06 2014 12:00AM
Credit:	Larry W. Cashdollar
Vulnerable:
Not Vulnerable:

Joomla XCloner - Backup and Restore Component Multiple Security Vulnerablities

The XCloner - Backup and Restore component for Joomla is prone to multiple security vulnerabilities, including:

1. Multiple arbitrary command-execution vulnerabilities
2. An arbitrary-file-download vulnerability
3. A directory-traversal vulnerability
4. Multiple information-disclosure vulnerabilities

An attacker may leverage these issues to execute arbitrary commands, to download arbitrary files from the web server and obtain potentially sensitive information and that could aid in further attacks.

Joomla XCloner - Backup and Restore Component Multiple Security Vulnerablities

An attacker can use a browser to exploit these issues.

Joomla XCloner - Backup and Restore Component Multiple Security Vulnerablities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Joomla XCloner - Backup and Restore Component Multiple Security Vulnerablities

References:

• Vendor Homepage (XCloner)