Vulnerabilities > Projoom

DATE CVE VULNERABILITY TITLE RISK
2019-11-13 CVE-2014-1214 Unrestricted Upload of File with Dangerous Type vulnerability in Projoom Smart Flash Header 3.0.2
views/upload.php in the ProJoom Smart Flash Header (NovaSFH) component 3.0.2 and earlier for Joomla! allows remote attackers to upload and execute arbitrary files via a crafted (1) dest parameter and (2) arbitrary extension in the Filename parameter.
network
low complexity
projoom CWE-434
6.5