~/products/projoom/smart_flash_header

pipeline liveDigest Docs

Projoom Smart Flash Header vulnerabilities

1 known vulnerability affecting projoom/smart_flash_header.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

SortPage 1 of 1

CVE-2014-1214P2HIGHCVSS 8.8PoC≤ 3.0.22019-11-13

CVE-2014-1214 [HIGH] CWE-434 CVE-2014-1214: views/upload.php in the ProJoom Smart Flash Header (NovaSFH) component 3.0.2 and earlier for Joomla! views/upload.php in the ProJoom Smart Flash Header (NovaSFH) component 3.0.2 and earlier for Joomla! allows remote attackers to upload and execute arbitrary files via a crafted (1) dest parameter and (2) arbitrary extension in the Filename parameter.