Exploit for Path Traversal in Joomla Joomla!

CVE-2019-10945

githubexploit · 2026-03-19

Description

This describes a path traversal exploit in Joomla CVE 2019 10945 using Python3.

Entry point

Parameterfolder · query param

Path/administrator/?option=com_media&view=mediaList&tmpl=component&folder=/..

Directory traversal in Joomla Media Manager allows access outside the media root via the folder parameter

Affected Joomla Joomla\! versions

Joomla Joomla\!≤ 3.9.4

All known vulnerabilities by product

Joomla!

CVSS 9.8 for CVE-2019-10945

9.8

HIGH SEVERITY

Version 3.0

VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

Working code

100%confidence this exploit runs

Based on 3 file(s) in the source

EPSS Score

38.0%higher than 98.4% of all CVEs

Updated 2026-08-25

Exploit Details

Modified:2026-03-19 14:42

Last Seen:2026-03-19 14:43

Reporter:tayW84

Written in:Python

Last commit:2026-03-19

Other exploits for CVE-2019-10945

CVE-2019-10945----Python3

2026-09-13 KitPloitKITPLOIT

CVE-2019-10945

2026-09-13 KitPloitKITPLOIT

CVE-2019-10945

2026-09-12 KitPloitKITPLOIT

Exploit for Path Traversal in Joomla Joomla!

2025-09-02 SniziGITHUB

Joomla Core 1.5.0 - 3.9.4 - Directory Traversal / Authenticated Arbitrary File Deletion Exploit

2019-04-16 Haboob TeamZDTPython

Joomla Core 1.5.0 - 3.9.4 - Directory Traversal Authenticated Arbitrary File Deletion

2019-04-16 Haboob TeamEXPLOITPACKPython

Joomla! Core 1.5.0 - 3.9.4 - Directory Traversal / Authenticated Arbitrary File Deletion

2019-04-16 Haboob TeamEXPLOITDBPython

Joomla 3.9.4 Arbitrary File Deletion / Directory Traversal

2019-04-16 Haboob TeamPACKETSTORMPython

Exploit Code

README2 lines

## https://sploitus.com/exploit?id=D48640CB-10CA-5670-B70D-98DAA14577B4
# CVE-2019-10945----Python3

Exploit Code

Share

Share on social media: