Description
Joomla! Core is prone to a security bypass vulnerability. Exploiting this issue may allow attackers to perform otherwise restricted actions and subsequently upload files outside of the /images/stories/ directory. Joomla! Core versions 1.0.x ranging from 1.0.0 and up to and including 1.0.10 are vulnerable.
Remediation
Update to Joomla! Core version 1.0.11 or latest
References
Related Vulnerabilities
WordPress Plugin WordPress+Microsoft Office 365/Azure AD-LOGIN Cross-Site Scripting (15.3)
WordPress Plugin Translate WordPress-Google Language Translator Cross-Site Scripting (6.0.11)
WordPress Plugin Ajax Search Pro Security Bypass (3.5)
WordPress Plugin JobSearch WP Job Board Cross-Site Scripting (1.5.2)
WordPress Plugin WP Frontend Profile Multiple Vulnerabilities (0.2.1)