VulnSocial

CVE-2019-10945Active Exploitation(joomla / joomla\!)

LOWCVSS 9.8 · CRITICAL

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for joomla joomla\! systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

An issue was discovered in Joomla! before 3.9.5. The Media Manager component does not properly sanitize the folder parameter, allowing attackers to act outside the media manager root directory.

joomla CVEsBack to dashboard
3.5/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Weakness type (CWE)
CWE-22

Priority

LOW

Exploitation

ACTIVE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • joomla\!

Threat summary

  • Active exploitation appears in 1 classified signals
  • 1 mentions across 1 observed day

What's happening

  • Active exploitation reported across 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
joomla
Products
joomla\!

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-08-29: 1Active Exploitation · 2026-08-29: 1Technical Details · 2026-08-29: 108-29
Signal classification1 categories
Active Exploitation
1100.0%
Full discourse1 post
  • Abdulmalik_cybersecurity@malik_cybersec
    Active Exploitation

    Day 27/100 Exploited CVE-2019-10945 (Joomla auth'd directory traversal) via Media Manager's folder=/.. param to list the web root grabbed the flag straight from the browser. @commando_skiipz @ce3nerd @KoredeSec @DefendWithFelix @ife0x01 https://t.co/DJ6UYqnPDg

    Post summary

    The tweet reports a real‑world exploitation of CVE-2019-10945 via Joomla’s Media Manager, showcasing a directory traversal that allowed the attacker to retrieve a flag.

    1212644.1K
    882 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appjoomlajoomla\!---

Explore more

Back to dashboardjoomla CVEsjoomla\! vulnerabilities