.. / CVE-2009-4679

• LFI
• Nuclei
• Web

Exploit for Joomla! Portfolio Nexus - Remote File Inclusion (CVE-2009-4679)

Description:

Joomla! Portfolio Nexus 1.5 contains a remote file inclusion vulnerability in the inertialFATE iF (com_if_nexus) component that allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.

Nuclei Template

View the template here CVE-2009-4679.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2009/CVE-2009-4679.yaml

References: