CNVD-2019-34135: Joomla configuration.php RCE

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://www.exploit-db.com/exploits/47465
• https://github.com/ianxtianxt/Joomla-3.4.6---configuration.php-Remote-Code-Execution
• https://www.hacktivesecurity.com/blog/2019/10/03/rusty-joomla-rce/
• https://github.com/chaitin/xray/issues/777
• https://avd.aliyun.com/detail?id=AVD-2021-904855
• https://www.ddpoc.com/DVB-2021-1991.html
• https://www.exploit-db.com/exploits/47539
• https://github.com/amcai/myscan
• https://www.cert.org.cn/publish/main/upload/File/CNVD2019%2040%2041.pdf

Related Vulnerabilities

• PoCCVE-2026-65761: Joomla Easy Store - SQL Injection
• PoCCVE-2026-56270: Flowise <= 3.0.13 - Unauthenticated OAuth Configuration Disclosure
• PoCCVE-2026-57827: RSFiles! for Joomla - Arbitrary File Upload
• PoCccm-detect: Clear-Com Core Configuration Manager Panel - Detect
• PoCweb-config: Web Configuration File - Detect
• PoCmonitorr-file-upload: Monitorr Services Configuration - Arbitrary File Upload
• PoCCVE-2026-48939: Joomla iCagenda < 3.9.10 - Unauthenticated Arbitrary File Upload RCE
• PoCclaude-code-agents: Claude Code Subagent Configuration - Exposure
• PoCjoomla-com-fabrik-lfi: Joomla! com_fabrik 3.9.11 - Local File Inclusion
• PoCdlink-dsl2600u-rom0-disclosure: D-Link DSL2600U - Unauthenticated rom-0 Configuration Disclosure
• PoCCVE-2026-48907: Joomla! JCE extension < 2.9.99.5 unauthenticated RCE
• PoChazelcast-management-exposure: Hazelcast Management Center - Configuration Exposure
• PoClaravel-sanctum-misconfig: Laravel Sanctum - Stateful Domain CSRF Misconfiguration