CVE-2011-490715.01.2020, 14:15Joomla! 1.5x through 1.5.12: Missing JEXEC CheckEnginsightProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVectorNISTPrimary5.3 MEDIUMNETWORKLOWNONECVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NBase ScoreCVSS 3.xEPSS ScorePercentile: UnknownAffected Products (NVD)VendorProductVersionjoomlajoomla\!1.5.0 ≤𝑥≤ 1.5.12𝑥= Vulnerable software versionsCommon Weakness EnumerationCWE-434 - Unrestricted Upload of File with Dangerous TypeThe software allows the attacker to upload or transfer files of dangerous types that can be automatically processed within the product's environment.Referenceshttps://developer.joomla.org/security/news/301-20090722-core-file-upload.htmlhttps://www.openwall.com/lists/oss-security/2011/12/25/7https://developer.joomla.org/security/news/301-20090722-core-file-upload.htmlhttps://www.openwall.com/lists/oss-security/2011/12/25/7