.. / CVE-2007-4504

• LFI
• Nuclei
• Web

Exploit for Joomla! RSfiles <=1.0.2 - Local File Inclusion (CVE-2007-4504)

Description:

Joomla! RSfiles 1.0.2 and earlier is susceptible to local file inclusion in index.php in the RSfiles component (com_rsfiles). This could allow remote attackers to arbitrarily read files via a .. (dot dot) in the path parameter in a files.display action.

Nuclei Template

View the template here CVE-2007-4504.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2007/CVE-2007-4504.yaml

References: