CVE-2015-7339 JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file extension for an image file to the /com_jce/editor/libraries/classes/browser.php script.
HighCVSS 8.8
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file extension for an image file to the /com_jce/editor/libraries/classes/browser.php script.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| widgetfactorylimited jce | >= 2.5.0, <= 2.5.2 | No fix listed |
References
- labs.integrity.pt exploit third-party-advisory