Joomla! OS Property Component File Upload Vulnerability


Description   A vulnerability has been reported in the OS Property Component for Joomla!, which can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to the index.php/properties-system/agent_register/ script allowing the upload of files with arbitrary extensions to a folder inside the webroot. This can be exploited to execute arbitrary PHP code by uploading a malicious PHP script.
The vulnerability is reported in version 2.0. Other versions may also be affected.
     
Vulnerable Products   Vulnerable Software:
OS Property 2.x (component for Joomla!)
     
Solution   Update to version 2.0.3.
     
CVE  
     
References   OS Property:
http://joomservices.com/components/ossolution-property.html
Daniel Barragan "
D4NB4R"
:
http://packetstormsecurity.org/files/114723/Joomla-OS-Property-Shell-Upload.html
     
Vulnerability Manager Detection   No
     
IPS Protection  
ASQ Engine alarm Available Since
Upload of a PHP file in a vulnerable web application
5.0.0
     


 
 
 
 
 Risk level 
High 

 Vulnerability First Public Report Date 
2012-07-16 

 Target Type 
Server 

 Possible exploit 
Remote