CVE-2019-14312 PoC — Aptana Jaxer 路径遍历漏洞

Source

https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2019/CVE-2019-14312.yaml

Associated Vulnerability

Title:Aptana Jaxer 路径遍历漏洞 (CVE-2019-14312)
Description:Aptana Jaxer是一款开源的JavaScript服务器。 Aptana Jaxer 1.0.3.4547版本中的wikilite源码浏览器存在本地文件包含漏洞。远程攻击者可借助tools/sourceViewer/index.html?filename=../ URI利用该漏洞读取内部文件。

Description

Aptana Jaxer 1.0.3.4547 is vulnerable to local file inclusion in the wikilite source code viewer. An attacker can read internal files on the server via a tools/sourceViewer/index.html?filename=../ URI.

File Snapshot


 id: CVE-2019-14312

info:
  name: Aptana Jaxer 1.0.3.4547 - Local File inclusion
  author: daffainfo

...

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!