01 Record
CVE-2013-5576
administrator/components/com_media/helpers/media.php in the media manager in Joomla! 2.5.x before 2.5.14 and 3.x before 3.1.5 allows remote authenticated users or remote attackers to bypass intended
UnratedPUBLISHEDCNA: mitre
CNA base scoreUnratedNo CNA CVSS vector
02 Description
administrator/components/com_media/helpers/media.php in the media manager in Joomla! 2.5.x before 2.5.14 and 3.x before 3.1.5 allows remote authenticated users or remote attackers to bypass intended
03 Exploitation and scoring
- Exploitation
- Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
- SSVC decision
- Not assessed by CISA
- EPSS probability
- 48.19% probability of exploitation activity in the next 30 days.
- EPSS percentile
- Equal to or higher than the score of 98.7% of scored records. A rank, not a probability.
- NVD base score
- The NVD has published no score for this record
- NVD CVSS vector
- No NVD score to derive
- NVD analysis status
- Modified. NVD last modified this record on 2026-06-16.
- Red Hat severity
- No Red Hat rating. Red Hat rates the CVEs that affect its products.
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
04 Metadata
- Published
- 2013-10-09 14:44Z13 YR AGO
- Last updated
- 2024-08-06 17:15Z2 YR AGO
- Reserved
- 2013-08-23
- Assigning CNA
- mitre
- Record state
- PUBLISHED
- Severity
- Not rated by the issuing CNA
- CNA CVSS vector
- Not published by the issuing CNA
- Weaknesses
- CWE-20Improper Input ValidationClass
- Data version
- 5.1
- Document digest
- 5d672c72bb615afc5f4776b406ce4cc182b0a1227aaf1f4f2c96f7e59ab41ed7
05 Affected products
VendorProductVersionsPlatforms
06 References
- www.exploit-db.com27610http://www.exploit-db.com/exploits/27610
- developer.joomla.orghttp://developer.joomla.org/security/563-20130801-core-unauthorised-uploads.html
- joomlacode.orghttp://joomlacode.org/gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=31626
- www.kb.cert.orgVU#639620http://www.kb.cert.org/vuls/id/639620
- seclists.org[oss-security] 20130824 Re: CVE request: Joomla unauthorised uploads before 2.5.14 / 3.1.5http://seclists.org/oss-sec/2013/q3/486
- github.comhttps://github.com/joomla/joomla-cms/commit/1ed07e257a2c0794ba19e864f7c5101e7e8c41d2
- github.comhttps://github.com/joomla/joomla-cms/commit/fa5645208eefd70f521cd2e4d53d5378622133d8
- seclists.org[oss-security] 20130824 CVE request: Joomla unauthorised uploads before 2.5.14 / 3.1.5http://seclists.org/oss-sec/2013/q3/484
- www.cso.com.auhttp://www.cso.com.au/article/523528/joomla_patches_file_manager_vulnerability_responsible_hijacked_websites/