Read the docs

Projoom

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Projoom records in CISA KEV

No Projoom vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record in Smart Flash Header · all components

Priority MEDIUM 45

views/upload.php in the ProJoom Smart Flash Header (NovaSFH) component 3.0.2 and earlier for Joomla! allows remote attackers to upload and execute arbitrary files via a crafted (1) dest parameter and (2) arbitrary extens…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.04317 Published 2019-11-13 No fix listed CWE-434
Open these records in search →