CVE-2018-6580 Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! via a view=upload&task=upload&pop=true&tmpl=component request.
CriticalCVSS 9.8
EPSS 36.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! via a view=upload&task=upload&pop=true&tmpl=component request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| janguo jimtawl | = 2.1.6 | No fix listed |
| janguo jimtawl | = 2.2.5 | No fix listed |
References
- 43958 exploit third-party-advisory vdb-entry