Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2009-2100 PoC — JoomlaPraise Projectfork目录遍历漏洞

Source
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2009/CVE-2009-2100.yaml
Associated Vulnerability
Title:JoomlaPraise Projectfork目录遍历漏洞 (CVE-2009-2100)
Description:Joomla! JoomlaPraise Projectfork (com_projectfork)组件2.0.10版本中存在目录遍历漏洞。远程攻击者可以借助对index.php的会话参数中的目录遍历序列，读取任意文件。
Description
Joomla! JoomlaPraise Projectfork (com_projectfork) 2.0.10 allows remote attackers to read arbitrary files via local file inclusion in the section parameter to index.php.
File Snapshot

 id: CVE-2009-2100

info:
  name: Joomla! JoomlaPraise Projectfork  2.0.10 - Local File Inclusion
  a

...
Shenlong Bot has cached this for you
Remarks
    1. It is advised to access via the original source first.
    2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).
    3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.