Intrusion PreventionJoomla!.tiny_mce.Plugin.Arbitrary.File.Upload
Description
This indicates an attack attempt to exploit a File Uploading vulnerability in Joomla.
There is a security bypass issue in the "TinyMCE" (tinybrowser) component. It may allow remote attackers to upload arbitrary files to the Joomla web folder.
Affected Products
Joomla TinyMCE 3.9.2
Impact
Security Bypass.
Recommended Actions
Currently we are not aware of any vendor supplied patch for this issue.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
Version Updates
| Date | Version | Detail |
|---|---|---|
| 2019-02-01 | 14.540 | Name:Joomla. TinyMCE. Arbitrary. File. Upload:Joomla!. tiny_mce. Plugin. Arbitrary. File. Upload |
| ID | 28321 |
| Created | Aug 04, 2011 |
| Updated | Mar 17, 2021 |
| Risk |
|
| CVE ID | CVE-2011-4908 |
| Exploit Prediction Score | 64.19% |
| Default Action | drop |
| Active | |
| Affected OS | Windows, Linux, BSD, Solaris, MacOS |
| Affected App | PHP_app |