Us   Eu   Au Get in touch

[20130801] - Core - Unauthorised Uploads

  • Project: Joomla!
  • SubProject: All
  • Severity: Critical
  • Versions: 2.5.13 and earlier 2.5.x versions. 3.1.4 and earlier 3.x versions.
  • Exploit type: Unauthorised Uploads
  • Reported Date: 2013-June-25
  • Fixed Date: 2013-July-31
  • CVE Number: Pending


Inadequate filtering leads to the ability to bypass file type upload restrictions.

Affected Installs

Joomla! version 2.5.13 and earlier 2.5.x versions; and version 3.1.4 and earlier 3.x versions.


Upgrade to version 2.5.14 or 3.1.5.


The JSST at the Joomla! Security Center.

Reported By: Versafe
[20130801] - Core - Unauthorised Uploads

Read more

Contact us

Need a Joomla Expert?