SECUNIA ADVISORY ID:
Customer Area (Credentials Required)
A vulnerability has been reported in the OS Property Component for
Joomla!, which can be exploited by malicious people to compromise a
The vulnerability is caused due to the
index.php/properties-system/agent_register/ script allowing the
upload of files with arbitrary extensions to a folder inside the
webroot. This can be exploited to execute arbitrary PHP code by
uploading a malicious PHP script.
The vulnerability is reported in version 2.0. Other versions may also
No official solution is currently available.
PROVIDED AND/OR DISCOVERED BY:
Daniel Barragan "D4NB4R"