PT-2018-17644

Name of the Vulnerable Software and Affected Versions Jimtawl versions 2.1.6 through 2.2.5 Description The issue allows for arbitrary file upload in the Jimtawl component for Joomla. This can be achieved through a request to the "view=upload&task=upload&pop=true&tmpl=component" endpoint...

CVE-2018-6580: Unrestricted Upload of File with Dangerous Type

Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! via a view=upload&task=upload&pop=true&tmpl=component request...