PT-2026-46210 · Joomsky · Js Jobs

Qw3Rtyty · Published 2026-06-04 · Updated 2026-06-04 · CVE-2019-25740

Mitre

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Joomla com jsjobs 1.2.6 contains an arbitrary file deletion vulnerability that allows authenticated attackers to delete files by manipulating custom userfield parameters. Attackers can send POST requests to the job.savejob task with path traversal sequences in the field 2 parameter to delete arbitrary files accessible to the web server.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2019-25740

Affected Products

Js Jobs

References · 5

• 🔥 https://exploit-db.com/exploits/47281 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25740 · Security Note
• https://vulncheck.com/advisories/joomla-com-jsjobs-arbitrary-file-deletion · Note
• https://joomsky.com/5/download/1 · Note
• https://joomsky.com · Note