.. / CVE-2009-3318

• LFI
• Nuclei
• Web

Exploit for Joomla! Roland Breedveld Album 1.14 - Local File Inclusion (CVE-2009-3318)

Description:

Joomla! Roland Breedveld Album 1.14 (com_album) is susceptible to local file inclusion because it allows remote attackers to access arbitrary directories and have unspecified other impact via a .. (dot dot) in the target parameter to index.php.

Nuclei Template

View the template here CVE-2009-3318.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2009/CVE-2009-3318.yaml

References: