Skip to content
KitploitKITPLOIT
ToolsExploitsBlog
Log in
Submit
ToolsExploitsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

FeedsContactPrivacy© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2020-24597 — Directory traversal in com_media to RCE | Kitploit
Tools/GitHubGitHub/hoangkien1020/cve-2020-24597
Vulnerability AnalysisExploitationWeb Application ExploitationPenetration TestingPayload Development
GitHubhoangkien1020/cve-2020-24597

CVE-2020-24597

Directory traversal in com_media to RCE

View Repository
42125 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Made by HK

CVE-2020-24597: Directory traversal in com_media to RCE

Note: Because Joomla core 3.9.21 fixed improperly, therefore this bug has't patched improperly. I can bypass this patch eseaily. I want to keep this secret until this bug will have been fixed completely.

Link

https://developer.joomla.org/security-centre/827-20200803-core-directory-traversal-in-com-media.html

PoC (Full)

Affected version: Joomla core <=3.9.24

User requirement: Admin account (Not Superadmin)

Gain access: Create superadmin, then trigger RCE.

Remote Code Execution (RCE) in Joomla

Run cve202024597.py with your credentials and access link rce:

#python cve202024597.py -url http://test.local -u admin -p 1234 -rce 1

image

Full PoC in here:

https://github.com/HoangKien1020/CVE-2021-23132

Download Tool