Secunia

A vulnerability has been discovered in the Remository component for Joomla! / Mambo, which can be exploited by malicious users to compromise a vulnerable system.

The vulnerability is caused due to an error in application when uploading thumbnails, which allows uploading of files with arbitrary extensions to a folder inside the webroot. This can be exploited to e.g. execute arbitrary PHP code by uploading a PHP file.

NOTE: The stored file name is based on the original file name and a time stamp, which is predictable.

The vulnerability is confirmed in version 3.53.5J on Joomla!. Other versions may also be affected.

Solution
Update to version 3.53.7J.

Provided and/or discovered by
J3yk0ob

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area