Description
Joomla!是美国Open Source Matters团队的一套使用PHP和MySQL开发的开源、跨平台的内容管理系统(CMS)。 Joomla!中的JCE组件2.0.18之前版本中的editor/extensions/browser/file.php中存在未限制任意文件上传漏洞。远程攻击者可利用该漏洞通过上传一个双扩展名的文件如.php.gif，执行任意PHP代码。
Joomla! JCE组件任意文件上传漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://zone.ci/aliyun/ali_nvd/207400.html
https://www.acunetix.com/vulnerabilities/web/joomla-jce-arbitrary-file-upload/
https://nvd.nist.gov/vuln/detail/CVE-2011-5134
https://www.juniper.net/us/en/threatlabs/ips-signatures/detail.HTTP:PHP:JOOMLA-JCE-FILE-UPLOAD.html
https://www.rapid7.com/db/modules/exploit/unix/webapp/joomla_comjce_imgmanager/
https://labs.integrity.pt/advisories/cve-2015-7339/
https://github.com/advisories/GHSA-gmf4-rxmx-v3cp
https://www.cvedetails.com/cve/CVE-2012-2902/
https://www.joomlacontenteditor.net/