CVE-2018-6580

CRITICAL

Jimtawl 2.1.6 and 2.2.5 - Unrestricted File Upload via Component Request

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2018-6580. PoCs published by Ihsan Sencan.

AI-analyzed exploit summary This is a writeup describing an arbitrary file upload vulnerability in Joomla! Component Jimtawl 2.2.5. It provides URLs for exploitation but lacks actual exploit code or payload details.

Description

Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! via a view=upload&task=upload&pop=true&tmpl=component request.

Exploits (1)

exploitdb WRITEUP
by Ihsan Sencan · textwebappsphp
https://www.exploit-db.com/exploits/43958

This is a writeup describing an arbitrary file upload vulnerability in Joomla! Component Jimtawl 2.2.5. It provides URLs for exploitation but lacks actual exploit code or payload details.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Theoretical
Target: Joomla! Component Jimtawl 2.2.5
No auth needed
Prerequisites: Access to the vulnerable Joomla component
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References
Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/43958

Scores

CVSS v3 9.8
EPSS 0.3687
EPSS Percentile 98.3%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-434
Status published
Products (2)
janguo/jimtawl 2.1.6
janguo/jimtawl 2.2.5
Published Feb 02, 2018
Tracked Since Feb 18, 2026