Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
580
VMScore

CVE-2020-10239

Published: 16/03/2020 Updated: 21/07/2021
CVSS v2 Base Score: 6.5 | Impact Score: 6.4 | Exploitability Score: 8
CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8
VMScore: 580
Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Subscribe to Joomla\!

Vulnerability Summary

An issue exists in Joomla! prior to 3.9.16. Incorrect Access Control in the SQL fieldtype of com_fields allows access for non-superadmin users.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

joomla joomla\\!

Github Repositories

https://github.com/HoangKien1020/CVE-2020-10238

CVE-2020-10238: Incorrect Access Control in com_templates PoC

Made by HK CVE-2020-10238: Incorrect Access Control in com_templates- RCE CVE-2020-10239: Incorrect Access Control in com_fields SQL field- RCE Link developerjoomlaorg/security-centre/804-20200303-core-incorrect-access-control-in-com-templateshtml developerjoomlaorg/security-centre/806-20200305-core-incorrect-access-control-in-com-fields-sql-fieldhtml My b

https://github.com/HoangKien1020/Joomla-CVE

CVE-2020-10238: Incorrect Access Control in com_templates PoC

Made by HK CVE-2020-10238: Incorrect Access Control in com_templates- RCE CVE-2020-10239: Incorrect Access Control in com_fields SQL field- RCE Link developerjoomlaorg/security-centre/804-20200303-core-incorrect-access-control-in-com-templateshtml developerjoomlaorg/security-centre/806-20200305-core-incorrect-access-control-in-com-fields-sql-fieldhtml My b

https://github.com/HoangKien1020/CVE-2020-10239

CVE-2020-10239: Incorrect Access Control in com_fields SQL field-RCE- PoC

Made by HK CVE-2020-10239: Incorrect Access Control in com_fields SQL field - RCE PoC Affected version: Joomla core from 370 to 3915 User requirement: Manager account(Lowest-level in back-end) Gain access: Change you from Manager to Superadmin, then trigger RCE Remote Code Execution (RCE) in Joomla Run cve202010239py with your credentials and access link rce:

References

CWE-863https://developer.joomla.org/security-centre/806-20200305-core-incorrect-access-control-in-com-fields-sql-fieldhttps://nvd.nist.govhttps://github.com/HoangKien1020/CVE-2020-10238
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
client sideCVE-2023-31889template injectionCVE-2024-4304CVE-2006-4304CVE-2024-33272type confusionCVE-2024-21345CVE-2024-33271
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook