CVE-2021-26040

An issue was discovered in Joomla! 4.0.0. The media manager does not correctly check the user's permissions before executing a file deletion command...

Arbitrary file deletion

An issue was discovered in Joomla! 4.0.0. The media manager does not correctly check the user's permissions before executing a file deletion command...

CVE-2021-26040

Joomla! 4.0.0 (and 4.0.x prior to 4.0.1) is affected by an insufficient access control in the com_media deletion endpoint. The media manager does not properly verify user permissions before executing a file deletion command, enabling an unauthenticated, remote attacker to delete arbitrary files o...

PT-2021-16933 · Joomla · Joomla!

Name of the Vulnerable Software and Affected Versions: Joomla! version 4.0.0 Description: An issue was discovered in the media manager, which does not correctly check the user's permissions before executing a file deletion command. Recommendations: For Joomla! version 4.0.0, update to a version...

Vulnerability fixed in Joomla! media manager

Joomla has fixed a vulnerability in the Joomla! media!! manager. Due to improper access control, a user could without being authorized to do so could delete arbitrary content from the media directory. Joomla has released updates to fix the vulnerability in Joomla! 4.0.1. For more information, see...

Joomla! 访问控制错误漏洞

Joomla! is a world-renowned content management system developed using the PHP language with a MySQL database, and can be implemented on various platforms such as Linux, Windows, MacOSX, etc. An incorrect access control vulnerability exists in Joomla! version 4.0.0. The vulnerability stems from th...

[20210801] - Core - Insufficient access control for com_media deletion endpoint

The media manager does not correctly check the user's permissions before executing a file deletion command...

Exploit for Cross-site Scripting in Tastyigniter

CVE-2021-38699 : Multiple Reflected XSS in TastyIgniter v3.0.7...

CuteNews 2.1.2 Arbitrary File Deletion

Exploit Title: CuteNews 2.1.2 - Arbitrary File Deletion Date: 2020-05-08 Author: Besim ALTINOK Vendor Homepage: https://cutephp.com Software Link: https://cutephp.com/click.php?cutenewslatest Version: v2.1.2 Maybe it affect other versions Tested on: Xampp Credit: İsmail BOZKURT Remotely: Yes...

CuteNews 2.1.2 - Arbitrary File Deletion Vulnerability

Exploit for php platform in category web applications Exploit Title: CuteNews 2.1.2 - Arbitrary File Deletion Author: Besim ALTINOK Vendor Homepage: https://cutephp.com Software Link: https://cutephp.com/click.php?cutenewslatest Version: v2.1.2 Maybe it affect other versions Tested on: Xampp...

CuteNews 2.1.2 - Arbitrary File Deletion

Exploit Title: CuteNews 2.1.2 - Arbitrary File Deletion Date: 2020-05-08 Author: Besim ALTINOK Vendor Homepage: https://cutephp.com Software Link: https://cutephp.com/click.php?cutenewslatest Version: v2.1.2 Maybe it affect other versions Tested on: Xampp Credit: İsmail BOZKURT Remotely: Yes...

CVE-2019-11021

admin/app/mediamanager in Schlix CMS 2.1.8-7 allows Authenticated Unrestricted File Upload, leading to remote code execution. NOTE: "While inadvertently allowing a PHP file to be uploaded via Media Manager was an oversight, it still requires an admin permission. We think it's pretty rare for an...

Unrestricted file upload

DISPUTED admin/app/mediamanager in Schlix CMS 2.1.8-7 allows Authenticated Unrestricted File Upload, leading to remote code execution. NOTE: "While inadvertently allowing a PHP file to be uploaded via Media Manager was an oversight, it still requires an admin permission. We think it's pretty rare...

Joomla Directory Traversal Vulnerability

Joomla! is a U.S. Open Source Matters team using PHP and MySQL development of a set of open source , cross-platform content management system CMS. Media Manager is used in one of the media management components . A path traversal vulnerability exists in commedia in Joomla! CMS versions 1.5.0...

CVE-2019-10945

An issue was discovered in Joomla! before 3.9.5. The Media Manager component does not properly sanitize the folder parameter, allowing attackers to act outside the media manager root directory...

CVE-2019-10945

An issue was discovered in Joomla! before 3.9.5. The Media Manager component does not properly sanitize the folder parameter, allowing attackers to act outside the media manager root directory...

Directory traversal

An issue was discovered in Joomla! before 3.9.5. The Media Manager component does not properly sanitize the folder parameter, allowing attackers to act outside the media manager root directory...

CVE-2019-10945

An issue was discovered in Joomla! before 3.9.5. The Media Manager component does not properly sanitize the folder parameter, allowing attackers to act outside the media manager root directory...

CVE-2019-10945

CVE-2019-10945 affects Joomla! versions prior to 3.9.5, specifically the Media Manager component. The vulnerability stems from improper sanitization of the folder parameter, which can allow an attacker to access outside the media root directory (path traversal). The issue is documented as a core ...

Joomla! 1.5.x < 3.9.5 Multiple Vulnerabilities

According to its self-reported version number, the detected Joomla! application is affected by multiple vulnerabilities : - A directory traversal vulnerability exists in versions 1.5.0 to 3.9.4 within the Media Manager component due to improperly sanitizing the folder parameter. An authenticated,...