CVE-2026-105603criticalCWE-434

CVE-2026-105603: falha crítica em dj-extensions.com DJ-Classifieds extension for…

Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar DJ-Classifieds extension for Joomla

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.4epss 0.3%
Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3 - The Joomla extension DJ-Classifieds is vulnerable to an unprivileged file upload, leading to full RCE.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Produtos afetados
dj-extensions.com · DJ-Classifieds extension for Joomla
CVEs relacionadas — dj-extensions.com DJ-Classifieds extension for…

No mesmo produto, das mais perigosas para as menos.

CVE-2026-61424CRITICALJoomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2EPSS 0.4%CVE-2026-105604CRITICALJoomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3EPSS 0.4%CVE-2026-105605MEDIUMJoomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds < 3.11.3EPSS 0.3%