CVE-2020-24597

CVE-2020-24597: Joomla core contains a directory traversal in com_media that allows access to files outside the webroot. Public sources list affected versions as Joomla core up to 3.9.24 (Nessus plugin 112581) and up to 3.9.20 (OpenVAS entry). Root cause is lack of input validation for com_media ...

Joomla <=3.9.24 管理员权限命令执行(CVE-2021-23132、CVE-2020-24597)

https://github.com/HoangKien1020/CVE-2021-23132...

Joomla! 2.5.x < 3.9.21 Multiple Vulnerabilities

According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.9.21. It is, therefore, affected by multiple vulnerabilities. - Lack of escaping in modlatestactions allows Cross-Site Scripting XSS attacks. CVE-2020-24599 - Lack of input...

Joomla 2.5.x < 3.9.21 Multiple Vulnerabilities (5821-joomla-3-9-21)

According to its self-reported version, the instance of Joomla! running on the remote web server is 2.5.x prior to 3.9.21. It is, therefore, affected by multiple vulnerabilities. - Lack of escaping in modlatestactions allows XSS attacks. CVE-2020-24599 - Lack of input validation in comcontent lea...