CVE-2013-5576
EXPLOITED IN THE WILDJoomla! <2.5.14, <3.1.5 - Auth Bypass
Title source: llmExploitation Summary
CVE-2013-5576 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io).
EIP tracks 2 public exploits from researchers including Metasploit, Jens Hinrichsen, juan vazquez, including a Metasploit module exploits/unix/webapp/joomla_media_upload_exec.
AI-analyzed exploit summary This Metasploit module exploits an arbitrary file upload vulnerability in Joomla's Media Manager component (CVE-2013-5576), allowing unauthenticated or authenticated (Editor role or higher) attackers to upload and execute malicious PHP files, leading to remote code execution.
Description
administrator/components/com_media/helpers/media.php in the media manager in Joomla! 2.5.x before 2.5.14 and 3.x before 3.1.5 allows remote authenticated users or remote attackers to bypass intended access restrictions and upload files with dangerous extensions via a filename with a trailing . (dot), as exploited in the wild in August 2013.
Exploits (2)
This Metasploit module exploits an arbitrary file upload vulnerability in Joomla's Media Manager component (CVE-2013-5576), allowing unauthenticated or authenticated (Editor role or higher) attackers to upload and execute malicious PHP files, leading to remote code execution.
This Metasploit module exploits a file upload vulnerability in Joomla's Media Manager component (CVE-2013-5576), allowing arbitrary PHP file upload and remote code execution. It supports both authenticated and unauthenticated exploitation depending on the target configuration.