CVE-2020-8641 PoC — Lotus Core CMS 路径遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2020/CVE-2020-8641.yaml

Associated Vulnerability

Title:Lotus Core CMS 路径遍历漏洞 (CVE-2020-8641)
Description:Lotus Core CMS是Lotus Core CMS项目的一款应用程序。提供了快速轻松的网站创建以及与phpbb3集成的功能。 Lotus Core CMS 1.0.1版本存在路径遍历漏洞。远程攻击者利用该漏洞可以获取.php文件。

Description

Lotus Core CMS 1.0.1 allows authenticated local file inclusion of .php files via directory traversal in the index.php page_slug parameter.

File Snapshot


 id: CVE-2020-8641

info:
  name: Lotus Core CMS 1.0.1 - Local File Inclusion
  author: 0x_Akoko
  se

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!