.. / CVE-2009-1496

• LFI
• Nuclei
• Web

Exploit for Joomla! Cmimarketplace 0.1 - Local File Inclusion (CVE-2009-1496)

Description:

Joomla! Cmimarketplace 0.1 is susceptible to local file inclusion because com_cmimarketplace allows remote attackers to list arbitrary directories via a .. (dot dot) in the viewit parameter to index.php.

Nuclei Template

View the template here CVE-2009-1496.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2009/CVE-2009-1496.yaml

References: