CVE-2026-105603: Malicious File Upload

Q: Which installations are affected?

DJ-Classifieds versions earlier than 3.11.3 are affected. The issue applies to the DJ-Classifieds Joomla extension.

Q: What access does an attacker need to exploit this?

An attacker needs authenticated access with low privileges. No user interaction is required, and the attack can be carried out over the network.

Q: What is the potential impact?

The vulnerable upload functionality can allow an unprivileged authenticated user to upload arbitrary files, resulting in remote code execution. This can compromise confidentiality, integrity, and availability.

Published Nov 2, 2026

Updated

Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3 - The Joomla extension DJ-Classifieds is vulnerable to an unprivileged file upload, leading to full RCE.

Event History

Nov 2, 2026

CVE Published

via NVD·07:17 PM

Data Sourced

via NVD·07:17 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which installations are affected?

DJ-Classifieds versions earlier than 3.11.3 are affected. The issue applies to the DJ-Classifieds Joomla extension.

What access does an attacker need to exploit this?

An attacker needs authenticated access with low privileges. No user interaction is required, and the attack can be carried out over the network.

What is the potential impact?

The vulnerable upload functionality can allow an unprivileged authenticated user to upload arbitrary files, resulting in remote code execution. This can compromise confidentiality, integrity, and availability.

CVE-2026-105603: Malicious File Upload

Event History

Frequently Asked Questions

Which installations are affected?

What access does an attacker need to exploit this?

What is the potential impact?

Company

Resources

Contact

Frequently Asked Questions

Which installations are affected?

What access does an attacker need to exploit this?

What is the potential impact?