CWE Code: 434
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Unrestricted Upload of File with Dangerous Type
Summary: in joomla! 3.2.0 through 3.6.5 (fixed in 3.7.0), inadequate mime type checks allowed low-privilege users to upload swf files even if they were explicitly forbidden.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): NONE/PARTIAL/NONE
Published Date: 2017-04-25
Last Modified Date: 2017-05-02