.. / CVE-2008-2650

• LFI
• Nuclei
• Web

Exploit for CMSimple 3.1 - Local File Inclusion (CVE-2008-2650)

Description:

CMSimple 3.1 is susceptible to local file inclusion via cmsimple/cms.php when register_globals is enabled which allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the sl parameter to index.php. NOTE: this can be leveraged for remote file execution by including adm.php and then invoking the upload action. NOTE: on 20080601, the vendor patched 3.1 without changing the version number.

Nuclei Template

View the template here CVE-2008-2650.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2008/CVE-2008-2650.yaml

References: