.. / CVE-2019-14312

• LFI
• Nuclei
• Web

Exploit for Aptana Jaxer 1.0.3.4547 - Local File inclusion (CVE-2019-14312)

Description:

Aptana Jaxer 1.0.3.4547 is vulnerable to local file inclusion in the wikilite source code viewer. An attacker can read internal files on the server via a tools/sourceViewer/index.html?filename=../ URI.

Nuclei Template

View the template here CVE-2019-14312.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2019/CVE-2019-14312.yaml

References: