Exploit for CVE-2019-10945----Python3

kitploit · 2026-09-03

Description

Authenticated directory traversal in Joomla! Core up to 3.9.4 enabling arbitrary file deletion.

Entry point

Parameterfolder · query param

Path/administrator/?option=com_media&view=mediaList&tmpl=component&folder=/..

Directory traversal in Joomla Media Manager allows access outside the media root via the folder parameter

Affected Joomla Joomla\! versions

Joomla Joomla\!≤ 3.9.4

All known vulnerabilities by product

CVSS 9.8 for CVE-2019-10945

9.8

HIGH SEVERITY

Version 3.0

VectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:UNCHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

EPSS Score

38.0%higher than 98.4% of all CVEs

Updated 2026-08-31

CVE Information

Exploit Details

Modified:2026-09-03 23:37

Last Seen:2026-09-05 13:18

Reporter:KitPloit

Tags

Joomla! Coredirectory traversalfile deletionauthenticatedCVE-2019-10945

Other exploits for CVE-2019-10945

2026-09-13 KitPloitKITPLOIT

2026-09-12 KitPloitKITPLOIT

Exploit for Path Traversal in Joomla Joomla!

2026-03-19 tayW84GITHUB

Exploit for Path Traversal in Joomla Joomla!

2025-09-02 SniziGITHUB

Joomla Core 1.5.0 - 3.9.4 - Directory Traversal / Authenticated Arbitrary File Deletion Exploit

2019-04-16 Haboob TeamZDTPython

Joomla Core 1.5.0 - 3.9.4 - Directory Traversal Authenticated Arbitrary File Deletion

2019-04-16 Haboob TeamEXPLOITPACKPython

Joomla! Core 1.5.0 - 3.9.4 - Directory Traversal / Authenticated Arbitrary File Deletion

2019-04-16 Haboob TeamEXPLOITDBPython

Joomla 3.9.4 Arbitrary File Deletion / Directory Traversal

2019-04-16 Haboob TeamPACKETSTORMPython

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-TAYW84-CVE-2019-10945----PYTHON3
# CVE-2019-10945----Python3

Joomla! Core 1.5.0 - 3.9.4 - Обход каталога / Аутентифицированное удаление произвольных файлов