CVE-2011-5148

CVE-2011-5148 describes multiple incomplete blacklist vulnerabilities in the Simple File Upload (mod_simplefileuploadv1.3) module for Joomla!, affecting versions before 1.3.5. This flaw allows remote attackers to execute arbitrary code by uploading files with specific extensions like .php5, .php6, or double extensions (e.g., .php.jpg) and then directly accessing them. The vulnerability has a CVSS score of 6.8 (Medium), indicating it can be exploited remotely with medium attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. While not listed in CISA's KEV catalog, it was exploited in the wild in January 2012, and public exploit code is available via ExploitDB. Despite its past exploitation, the vulnerability has minimal community discussion or media coverage.