Joomla <=3.9.24 管理员权限命令执行(CVE-2021-23132、CVE-2020-24597)

https://github.com/HoangKien1020/CVE-2021-23132...

CVE-2021-23132

creationtimestamp| type| source ---|---|--- 2021-03-08 00:02:43+00:00| published-proof-of-concept| https://t.me/antichat/9342 2021-03-14 14:21:19+00:00| seen| https://t.me/LearnExploit/2156 2021-10-28 05:17:41+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2846 2022-02-...

CVE-2021-23132

The CVE-2021-23132 issue affects Joomla! core: versions 3.0.0 through 3.9.24 allow image-upload paths in com_media that were not intended, enabling access to unintended directories. Root cause: insecure handling in com_media leading to path exposure and potential exploitation. Documented impact i...

Exploit for CVE-2021-23132

CVE-2021-23132 commedia allowed paths that are not intended f...

Joomla! Remote Code Execution (CVE-2020-10238; CVE-2020-10239; CVE-2021-23132)

A remote code execution vulnerability exists in Joomla!. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...