CVE-2014-1214

Published: 2019-11-13T21:15Z

Last Modified: 2024-11-21T02:03Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

views/upload.php in the ProJoom Smart Flash Header (NovaSFH) component 3.0.2 and earlier for Joomla! allows remote attackers to upload and execute arbitrary files via a crafted (1) dest parameter and (2) arbitrary extension in the Filename parameter. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt