Description
The Admin Upload Image functionality in Joomla! before 1.0.11 allows remote authenticated users to upload files outside of the /images/stories/ directory via unspecified vectors.
References
- ADV-2006-3408 vdb-entry
- http://www.joomla.org/content/view/1841/78/
- 21666 third-party-advisory
- http://www.joomla.org/content/view/1843/74/
- joomla-administratorindex-error(28630) vdb-entry