CVE-2017-18345-COM_JOOMANAGER-ARBITRARY-FILE-DOWNLOAD

COMJOOMANAGER 2.0 -任意文件下载 使用插件：COMJOOMANAGER，从 CMS：Joomla 批量收集数据库，项目使用 python 2.x 开发，更多信息，请访问 YouTube 视频。 CVE: 2017-18345 风险 : Security Risk High 0day.Today-ID: 29950 ExploitDB-id: 44252 0day db-id: 16348...

CVE-2017-18345

The Joomanager component through 2.0.0 for Joomla! has an arbitrary file download issue, resulting in exposing the credentials of the database via an index.php?option=comjoomanager&controller=details&task=download&path=configuration.php request...

CVE-2017-18345

The CVE-2017-18345 entry concerns the Joomanager component for Joomla! up to version 2.0.0, where an arbitrary file download vulnerability in the details/download flow (path=configuration.php) can disclose database credentials. The root cause is an insecure download handler that allows access to ...