{"vulnerability": "CVE-2013-5576", "sightings": [{"uuid": "0596e5e2-ca36-4108-9bea-98565bcfac36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-5576", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:41.000000Z"}, {"uuid": "b53c2f68-bc46-4a02-b48a-f873975fe2cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-5576", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:09:22.000000Z"}, {"uuid": "f1ff6c7f-6a28-4961-97bc-db3057a6753a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-5576", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/joomla_media_upload_exec.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "cd03b60e-960d-40af-b67a-e81c7df5f448", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2013-5576", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/27610", "content": "", "creation_timestamp": "2013-08-15T00:00:00.000000Z"}, {"uuid": "4d0f20c1-32d1-4869-b07e-0714847d1a9a", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-5576", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a76146eb-635b-4263-b1d9-baa3b180bf6a", "content": "", "creation_timestamp": "2026-06-19T16:45:36.542191Z"}, {"uuid": "5c243e8f-fdfd-4b36-bc7b-af71f509dfb9", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-5576", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9616ac08-ecfe-4308-947b-2958d32534e5", "content": "", "creation_timestamp": "2026-06-23T14:04:07.959703Z"}, {"uuid": "6da4f1c7-fb38-4de1-b184-fc32e85fb20e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2013-5576", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/joomla_media_upload_exec.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Jens Hinrichsen\", \"juan vazquez \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a vulnerability found in Joomla 2.5.x up to 2.5.13, as well as\\n          3.x up to 3.1.4 versions. The vulnerability exists in the Media Manager component,\\n          which comes by default in Joomla, allowing arbitrary file uploads, and results in\\n          arbitrary code execution. The module has been tested successfully on Joomla 2.5.13\\n          and 3.1.4 on Ubuntu 10.04. Note: If public access isn't allowed to the Media\\n          Manager, you will need to supply a valid username and password (Editor role or\\n          higher) in order to work properly.\", \"disclosure_date\": \"2013-08-01\", \"fullname\": \"exploit/unix/webapp/joomla_media_upload_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"Joomla Media Manager File Upload Vulnerability\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/joomla_media_upload_exec.rb\", \"platform\": \"PHP\", \"post_auth\": true, \"rank\": 600, \"ref_name\": \"unix/webapp/joomla_media_upload_exec\", \"references\": [\"CVE-2013-5576\", \"OSVDB-95933\", \"URL-http://developer.joomla.org/security/news/563-20130801-core-unauthorised-uploads\", \"URL-http://www.cso.com.au/article/523528/joomla_patches_file_manager_vulnerability_responsible_hijacked_websites/\", \"URL-https://github.com/joomla/joomla-cms/commit/fa5645208eefd70f521cd2e4d53d5378622133d8\", \"URL-http://niiconsulting.com/checkmate/2013/08/critical-joomla-file-upload-vulnerability/\", \"URL-https://www.rapid7.com/blog/post/2013/08/15/time-to-patch-joomla\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Joomla 2.5.x <=2.5.13 / Joomla 3.x <=3.1.4\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:43.618848Z"}]}