CVE-2018-6580

Arbitrary file upload exists in the Jimtawl 2.1.6 and 2.2.5 component for Joomla! via a view=upload&task=upload&pop=true&tmpl=component request.

• CWE-434

• https://www.exploit-db.com/exploits/43958Exploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/43958Exploit, Third Party Advisory, VDB Entry

Published

Feb 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-6574Go before 1.8.7, Go 1.9.x before 1.9.4, and Go 1.10 pre-rele…
• CVE-2018-6575SQL Injection exists in the JEXTN Classified 1.0.0 component…
• CVE-2018-6576SQL Injection exists in Event Manager 1.0 via the event.php …
• CVE-2018-6577SQL Injection exists in the JEXTN Membership 3.1.0 component…
• CVE-2018-6578SQL Injection exists in the JE PayperVideo 3.0.0 component f…
• CVE-2018-6579SQL Injection exists in the JEXTN Reverse Auction 3.1.0 comp…
• CVE-2018-6581SQL Injection exists in the JMS Music 1.1.1 component for Jo…
• CVE-2018-6582SQL Injection exists in the Zh GoogleMap 8.4.0.0 component f…
• CVE-2018-6583SQL Injection exists in the Timetable Responsive Schedule 1.…
• CVE-2018-6584SQL Injection exists in the DT Register 3.2.7 component for …
• CVE-2018-6585SQL Injection exists in the JTicketing 2.0.16 component for …
• CVE-2018-6586CA API Developer Portal 3.5 up to and including 3.5 CR6 has …6.1