.. / CVE-2010-0759

• LFI
• Nuclei
• Web

Exploit for Joomla! Plugin Core Design Scriptegrator - Local File Inclusion (CVE-2010-0759)

Description:

A directory traversal vulnerability in plugins/system/cdscriptegrator/libraries/highslide/js/jsloader.php in the Core Design Scriptegrator plugin 1.4.1 for Joomla! allows remote attackers to read, and possibly include and execute, arbitrary files via directory traversal sequences in the files[] parameter.

Nuclei Template

View the template here CVE-2010-0759.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2010/CVE-2010-0759.yaml

References: