critical9.8Public exploit code
CVE-2018-6580
Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Component Jimtawl 2.1.6 - Arbitrary File Upload2018-02-02 · webapps · php
Impact
Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! via a view=upload&task=upload&pop=true&tmpl=component request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Janguo | Jimtawl | Versions 2.1.6, 2.2.5 |