CVE-2013-5576 json
administrator/components/com_media/helpers/media.php in the media manager in Joomla!
published 2013-10-09 13 y ago modified 2026-06-16 4 mo ago also EUVD-2013-5416
- cvss
- 6.8
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 48.2%
- EPSS 48.2% chance of exploitation in 30 days, percentile 98%
- public exploits
- 2
- Metasploit, Exploit-DB
Summary
administrator/components/com_media/helpers/media.php in the media manager in Joomla! 2.5.x before 2.5.14 and 3.x before 3.1.5 allows remote authenticated users or remote attackers to bypass intended access restrictions and upload files with dangerous extensions via a filename with a trailing . (dot), as exploited in the wild in August 2013.
Patch / fix
Timeline
- First public exploit (Metasploit exploit/unix/webapp/joomla_media_upload_exec)
- Published
Exploit prediction
48.19% chance of exploitation in the next 30 days, higher than 98% of all scored CVEs (FIRST EPSS, 2026-11-09).
Exploits and checks
- Metasploit exploit/unix/webapp/joomla_media_upload_exec Joomla Media Manager File Upload Vulnerability metasploit exploit, excellent rank, 2013-08-01
- EDB-27610 Joomla! Component Media Manager - Arbitrary File Upload (Metasploit) remote, 2013-08-15
- github.com https://github.com/joomla/joomla-cms/commit/fa5645208eefd70f521cd2e4d53d5378622133d8 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 6.8 | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Classification
- Weakness
-
- CWE-20 Improper Input Validation
References
- github.com /joomla/joomla-cms/commit/1ed07e257a2c0794ba19e864f7c5101e7e8c41d2
-
github.com
/joomla/joomla-cms/commit/fa5645208eefd70f521cd2e4d53d5378622133d8
exploit, patch
-
exploit-db.com
/exploits/27610
exploit
- developer.joomla.org /security/563-20130801-core-unauthorised-uploads.html
- joomlacode.org /gf/project/joomla/tracker/?action=TrackerItemEdit&tracker_item_id=31626
-
kb.cert.org
/vuls/id/639620
third-party-advisory, us-government-resource
-
seclists.org
/oss-sec/2013/q3/486
mailing-list
-
seclists.org
/oss-sec/2013/q3/484
mailing-list
- cso.com.au /article/523528/joomla_patches_file_manager_vulnerability_responsible_hijacked_websites/
Sources
- CVE List CVE-2013-5576
- NVD CVE-2013-5576
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.