SecuritySpace - CVE-2016-9836

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2016-9836

Description: The file scanning mechanism of JFilterInput::isFileSafe() in Joomla! CMS before 3.6.5 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to upload and execute files with the `.php6`, `.php7`, `.phtml`, and `.phpt` extensions. Additionally, JHelperMedia::canUpload() did not blacklist these file extensions as uploadable file types.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2016-9836
BugTraq ID: 94663
http://www.securityfocus.com/bid/94663
https://github.com/XiphosResearch/exploits/tree/master/Joomraa

CVE ID:	CVE-2016-9836
Description:	The file scanning mechanism of JFilterInput::isFileSafe() in Joomla! CMS before 3.6.5 does not consider alternative PHP file extensions when checking uploaded files for PHP content, which enables a user to upload and execute files with the `.php6`, `.php7`, `.phtml`, and `.phpt` extensions. Additionally, JHelperMedia::canUpload() did not blacklist these file extensions as uploadable file types.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9836 BugTraq ID: 94663 http://www.securityfocus.com/bid/94663 https://github.com/XiphosResearch/exploits/tree/master/Joomraa