CVSS base score
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
What the vulnerability does
Joomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2 - The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated file upload, leading to full RCE.
Explanation of Vulnerability in Simple Terms
DJ-Classifieds extension for Joomla contains an unrestricted file upload vulnerability that allows unauthenticated attackers to upload arbitrary files to the server. An attacker can exploit this over the network without any special privileges or user interaction. Successful exploitation enables the attacker to run their own code on the site and compromise the entire Joomla installation.
What an attacker can do
Upload arbitrary files and run their own code on the site without authentication.
Potential impact on your site
Complete site compromise: attacker can read/modify/delete data, create admin accounts, or deface the site.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
