CVSS base score
What the vulnerability does
The K2 frontend article-attachment upload path accepts files whose extension is `.php`, and Apache's standard mod_php matches `\.php$` and executes them under the K2 web user. A K2 Author can upload a `shell.php`, then fetch `/media/k2/attachments/shell.php` and execute arbitrary PHP code in the web server's context.
Explanation of Vulnerability in Simple Terms
The K2 extension for Joomla contains an unrestricted file upload vulnerability. An attacker can upload files to the server without proper validation or restrictions. The exact attack requirements and impact severity cannot be determined due to missing CVSS data. Site administrators should contact the vendor for patch availability and interim mitigation guidance.
What an attacker can do
Upload files to the server without proper validation or restrictions.
Potential impact on your site
Attackers may upload malicious files that could compromise site integrity or enable further attacks.
Conditions required to exploit
Access to the K2 extension's upload functionality; specific authentication requirements unknown.
Key dates
External resources
Related vulnerabilities
