.. / CVE-2008-4668

• LFI
• Nuclei
• Web

Exploit for Joomla! Image Browser 0.1.5 rc2 - Local File Inclusion (CVE-2008-4668)

Description:

Joomla! Image Browser 0.1.5 rc2 is susceptible to local file inclusion via com_imagebrowser which could allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the folder parameter to index.php.

Nuclei Template

View the template here CVE-2008-4668.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2008/CVE-2008-4668.yaml

References: