.. / CVE-2020-13158

Exploit for Artica Proxy Community Edition <4.30.000000 - Local File Inclusion (CVE-2020-13158)

Description:

Artica Proxy Community Edition before 4.30.000000 is vulnerable to local file inclusion via the fw.progrss.details.php popup parameter.

Nuclei Template

View the template here CVE-2020-13158.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2020/CVE-2020-13158.yaml
Copy

References:

https://nvd.nist.gov/vuln/detail/CVE-2020-13158
https://sourceforge.net/projects/artica-squid/files/
https://github.com/soosmile/POC
https://github.com/InfoSec4Fun/CVE-2020-13158
https://github.com/nomi-sec/PoC-in-GitHub