CyberRota Analysis
AI-GeneratedThe AcyMailing Enterprise extension for Joomla versions prior to 11.1.0 is vulnerable due to a remote code execution flaw in its mailbox action feature, allowing unauthenticated users to upload malicious PHP files to the web root via unchecked MIME parts of incoming emails. This critical vulnerability poses a significant risk of arbitrary code execution, potentially compromising the entire web application. Organizations using this extension should prioritize immediate updates to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
Joomla Extension - acymailing.com - Remote Code Execution vulnerability in mailbox action feature in AcyMailing Enterprise extension < 11.1.0 - MIME parts of incoming emails were saved to media/com_acym/upload/ with no extension check, so anyone who could email the monitored mailbox could write a PHP file into the web root.