CVE-2010-2018 PoC — Buku Lokomedia CMS 'downlot.php'目录遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2010/CVE-2010-2018.yaml

Associated Vulnerability

Title:Buku Lokomedia CMS 'downlot.php'目录遍历漏洞 (CVE-2010-2018)
Description:Lokomedia CMS的downlot.php存在目录遍历漏洞，远程攻击者可以通过file参数的".."符读取任意文件。

Description

A Local File Inclusion (LFI) vulnerability exists in Lokomedia CMS. The application allows an attacker to include files on the server that should not be accessible, potentially exposing sensitive information.

File Snapshot


 id: CVE-2010-2018

info:
  name: Lokomedia CMS - Local File Inclusion
  author: r3Y3r53
  severity: 

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.