Skip to content

CVE-2018-6580 Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! via a view=upload&task=upload&pop=true&tmpl=component request.

CriticalCVSS 9.8 EPSS 36.3%
Published
Updated
Exploit status
No public exploit known

Description

Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! via a view=upload&task=upload&pop=true&tmpl=component request.

Affected products

ProductAffected versionsFixed in
janguo jimtawl = 2.1.6 No fix listed
janguo jimtawl = 2.2.5 No fix listed

References

  • 43958 exploit third-party-advisory vdb-entry