« Volver al listado

CVE-2011-5004

Estado: ModificadaMedia (6)—

Unrestricted file upload vulnerability in models/importcsv.php in the Fabrik (com_fabrik) component before 2.1.1 for Joomla! allows remote authenticated users with Manager privileges to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Fabrikar — COM Fabrikar

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-5004",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-12-25T01:55:04.490",
  "references": [
    {
      "url": "http://secunia.com/advisories/47036",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.ohloh.net/p/3417/commits/145749116",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.osvdb.org/77371",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/50823",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vulnerability-lab.com/get_content.php?id=342",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/47036",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.ohloh.net/p/3417/commits/145749116",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.osvdb.org/77371",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/50823",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vulnerability-lab.com/get_content.php?id=342",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unrestricted file upload vulnerability in models/importcsv.php in the Fabrik (com_fabrik) component before 2.1.1 for Joomla! allows remote authenticated users with Manager privileges to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de subida no restringida de ficheros en models/importcsv.php en el componente Fabrik (com_fabrik) anterior a v2.1.1 para Joomla! permite a atacantes remotos  con privilegios Manager ejecutar código de su elección al subir un fichero con una extensión ejecutable, accediendo posteriormente mediante una petición directa del fichero en un directorio no especificado."
    }
  ],
  "lastModified": "2026-06-16T23:35:45.933",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:fabrikar:com_fabrikar:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "34FFE454-F543-4C5E-A0C2-66C3AE55D11C",
              "versionEndIncluding": "2.1"
            },
            {
              "criteria": "cpe:2.3:a:fabrikar:com_fabrikar:1.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D99E7AAD-7334-42C2-856E-4BE0ABBED097"
            },
            {
              "criteria": "cpe:2.3:a:fabrikar:com_fabrikar:1.0.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0CBCDEBA-EC87-4671-B8DF-F2EB38FB1EFB"
            },
            {
              "criteria": "cpe:2.3:a:fabrikar:com_fabrikar:2.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D2AFD198-6B30-4991-8873-FBE32BBD4E34"
            },
            {
              "criteria": "cpe:2.3:a:fabrikar:com_fabrikar:2.0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "314C5956-E3AE-469E-AE2B-CDCCF8661870"
            },
            {
              "criteria": "cpe:2.3:a:fabrikar:com_fabrikar:2.0.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "557F950F-8D8E-4384-8233-A3E3193C065D"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:joomla:joomla\\!:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "2AC7400C-F6AF-4B5E-A34B-0222F94DCC46"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}