Ethical Hacking Automation

Automate Recon and scanning process with Vidoc. All security teams in one place

Joomla! Component com_sef - Local File Inclusion

By kannthu

High
Vidoc logoVidoc Module
#cve#cve2010#joomla#lfi#edb
Description
Author: daffainfo Classification CWE-ID: CWE-22 CVSS-Metrics: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N CVSS-Score: 8.6 A local file inclusion vulnerability in the Jvehicles (com_jvehicles) component version 1.0 for Joomla! allows remote attackers to load arbitrary files via the controller parameter in index.php. Reference - https://www.exploit-db.com/exploits/11997 Remediation Upgrade to a supported version. Metadata max-request: 1

Module preview

Concurrent Requests (1)
1. HTTP Request template
GET/index.php?option=co...
Matching conditions
regex: root:.*:0:0and
status: 200
Passive global matcher
No matching conditions.
On match action
Report vulnerability