CVE-2019-10945
CRITICALJoomla! < 3.9.4 - Path Traversal via Media Manager Folder Parameter
Title source: llmExploitation Summary
EIP tracks 5 public exploits for CVE-2019-10945. PoCs published by Haboob Team, dpgg101, Shockp.
AI-analyzed exploit summary This exploit leverages a directory traversal vulnerability in Joomla Core (1.5.0 through 3.9.4) to list files in arbitrary directories and delete files. It requires authentication and uses the Media Manager component to perform these actions.
Description
An issue was discovered in Joomla! before 3.9.5. The Media Manager component does not properly sanitize the folder parameter, allowing attackers to act outside the media manager root directory.
Exploits (5)
This exploit leverages a directory traversal vulnerability in Joomla Core (1.5.0 through 3.9.4) to list files in arbitrary directories and delete files. It requires authentication and uses the Media Manager component to perform these actions.
This repository contains a functional Python 3 exploit for CVE-2019-10945, which targets Joomla Core versions 1.5.0 through 3.9.4. The exploit demonstrates directory traversal and authenticated arbitrary file deletion by leveraging a vulnerability in the Joomla media manager component.
This repository contains a functional exploit for CVE-2019-10945, which targets Joomla versions 1.5.0 through 3.9.4. The exploit demonstrates directory traversal and authenticated arbitrary file deletion via crafted requests to the Joomla media manager component.
This repository contains a functional Python3 exploit for CVE-2019-10945, which targets a SQL injection vulnerability in Drupal 7.x. The exploit includes a Drupal password hash calculator and a script to exploit the vulnerability, demonstrating the ability to execute arbitrary SQL queries.
This repository contains a functional Python exploit for CVE-2019-10945, which targets a directory traversal and authenticated arbitrary file deletion vulnerability in Joomla versions 1.5.0 through 3.9.4. The exploit authenticates with Joomla credentials and allows listing or deleting files in specified directories.
References (3)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H