Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2010-1217 PoC — JE Form Creator组件目录遍历漏洞

Source
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-1217.yaml
Associated Vulnerability
Title:JE Form Creator组件目录遍历漏洞 (CVE-2010-1217)
Description:Joomla!是一款开放源码的内容管理系统（CMS）。 Joomla!的JE Form Creator（com_jeformcr）组件存在目录遍历漏洞。当停用magic_quotes_gpc时，远程攻击者可以通过index.php的view参数中的目录遍历序列读取任意文件。
Description
A directory traversal vulnerability in the JE Form Creator (com_jeformcr) component for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via directory traversal sequences in the view parameter to index.php. NOTE -- the original researcher states that the affected product is JE Tooltip, not Form Creator; however, the exploit URL suggests that Form Creator is affected.
File Snapshot

 id: CVE-2010-1217

info:
  name: Joomla! Component & Plugin JE Tooltip 1.0 - Local File Inclusion
  

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.