Description
An issue was discovered in Joomla! before 3.8.12. Inadequate checks in the InputFilter class could allow specifically prepared phar files to pass the upload filter.
Remediation
References
Related Vulnerabilities
phpMyFAQ Improper Restriction of Excessive Authentication Attempts Vulnerability (CVE-2017-11187)
WordPress Plugin WP Comment Remix SQL Injection and HTML Injection Vulnerabilities (1.4.3)
WordPress Plugin WooCommerce Email Test Information Disclosure (1.5)
WordPress Plugin My Tickets Security Bypass (1.9.11)
WordPress Plugin Visual CSS Style Editor Cross-Site Request Forgery (7.2.0)