CyberRota Analysis
AI-GeneratedJoomla! versions 1.0.0 to 6.1.2 are vulnerable due to an oversight in the default configuration, which fails to classify SHTML files as dangerous, allowing unrestricted uploads. This vulnerability could enable attackers to execute arbitrary code on affected servers, posing a significant risk to the integrity and security of the web applications. Organizations using these Joomla! versions should prioritize immediate remediation to mitigate potential exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Joomla! Core - [20260810] - Unrestricted uploads of SHTML files in Joomla 1.0.0-5.4.7, 6.0.0-6.1.2 - The default list of dangerous files did not include SHTML files. On servers that executed these files, that could lead to code execution.
Related CVEs
Other vulnerabilities affecting the same vendor(s)