从这个网页截图中可以获取到以下关于漏洞的关键信息： 漏洞标题: Joomla! Component Jimtawl 2.2.5 - Arbitrary File Upload EDB-ID: 43958 CVE: 2018-6580 作者: Ihsan Sencan 类型: WEBAPPS 平台: PHP 日期: 2018-02-02 版本: 2.2.5 测试平台: Win7_x64/KaliLinux_x64 CVE: N/A 漏洞描述 The vulnerability allows an attacker upload arbitrary file. 证明概念 (Proof of Concept) 1. 访问以下URL进行文件上传： - 2. 访问已上传的文件： - 相关链接 Vendor Homepage: http://janguo.de/ Software Link: https://extensions.joomla.org/extensions/extension/multimedia/streaming-a-broadcasting/jimtawl/ Software Download: http://janguo.de/lang-en/joomla-25-higher/jimtawl/pkg_jimtawl-2-2-5-current-r561-zip.raw Tags和Source Tags: N/A Advisory/Source: Link