CVE-2021-23132

CVE-2021-23132 commedia 允许非预期的图片上传路径导致RCE。 CVE-2020-24597 commedia中的目录遍历导致RCE 两个CVE相同。 PoC（完整） 受影响版本：Joomla核心 =3.9.24 用户条件：管理员账户（非超级管理员） 获取访问权限：创建超级管理员，然后触发RCE。 Joomla中的远程代码执行（RCE） 用你的凭据运行 cve-2021-23132.py 并访问链接进行rce： http://target/templates/protostar/error.php?cmd=ls PoC: root@kitploit: python3...

CVE-2026-57827

CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE Split-Controller Upload Bypass → Direct Write Task → /downloads/shell.php → RCE Overview CVE-2026-57827 is a critical-severity CVSS 9.8 unauthenticated arbitrary file upload vulnerability in RSFiles! comrsfiles, a widely...

CVE-2023-27842

CVE-2023-27842 eXtplorer 2.1.15 – 认证后远程代码执行导致的不安全权限 厂商主页：http://extplorer.net/ 软件链接：http://extplorer.net/attachments/download/99/eXtplorer2.1.15.zip 版本：2.1.15 安装 root@kitploit: git clone https://github.com/0xFTW/CVE-2023-27842 cd CVE-2023-27842 pip3 install -r requirements.txt 使用方法 root@kitploit:...

base-joomla

BASE-JOOMLA 这是 Cved 的一部分： 一个用于管理易受攻击的 Docker 容器的工具。 Cved：https://github.com/git-rep-src/cved 镜像来源：https://github.com/cved-sources/base-joomla 镜像基于：https://github.com/Medicean/VulApps/tree/master/base/joomla/3.7...

google_explorer

Welcome to Google Explorer Special thanks to ArchStrike and BlackArch for supporting ; + Google Mass Explorer PYTHON 3.6 This is a automated robot for google search engine and a massive exploitation tool. Make a google search and run a specific --plugin on the results. The dork you use is the key...

CVE-2019-15120

CVE-2019-15120 用于 Joomla! 上 Kunena 扩展 5.1.14 之前版本的 BBCode XSS 漏洞利用 信息 描述：在 Joomla! 的 Kunena 扩展 5.1.14 之前版本中，任何用户都可以通过在使用 BBCode 支持的任意字段中发送特殊消息来执行存储型 XSS 攻击。因此，该漏洞很容易导致 RCE。 受影响版本：Kunena 扩展 for Joomla! 版本 5.x 至 5.1.14 研究人员：Andrey Skuratov https://github.com/h3llraiser/...

Joomla-CVE-2023-23752

Joomla-CVE-2023-23752 此Python实现通过演示CVE-2023-23752的利用过程，达到教育目的。该代码提供了关于如何利用此漏洞的见解。 目录 关于 安装 用法 贡献 漏洞环境部署 致谢 许可证 免责声明 关于 本项目展示了一个Python实现，旨在演示CVE-2023-23752信息泄露漏洞。它包含一个docker-compose.yml文件，以简化设置和执行，使其对于高效演示或测试概念验证特别有用。 安装 要正确运行exploit.py文件，请下载项目文件并执行以下代码以安装必要的依赖： root@kitploit: pip install -r...

Joomla! RSfiles <=1.0.2 - Local File Inclusion

Joomla! RSfiles 1.0.2 and earlier is susceptible to local file inclusion in index.php in the RSfiles component comrsfiles. This could allow remote attackers to arbitrarily read files via a .. dot dot in the path parameter in a files.display action. id: CVE-2007-4504 info: name: Joomla! RSfiles...

Joomla! Cmimarketplace 0.1 - Local File Inclusion

Joomla! Cmimarketplace 0.1 is susceptible to local file inclusion because comcmimarketplace allows remote attackers to list arbitrary directories via a .. dot dot in the viewit parameter to index.php. id: CVE-2009-1496 info: name: Joomla! Cmimarketplace 0.1 - Local File Inclusion author: daffainf...

Joomla! Component redSHOP 1.0 - Local File Inclusion

A directory traversal vulnerability in the redSHOP comredshop component 1.0.x for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. id: CVE-2010-1531 info: name: Joomla! Component redSHOP 1.0 - Local File Inclusion author: daffainfo...

Joomla! Component PowerMail Pro 1.5.3 - Local File Inclusion

A directory traversal vulnerability in the givesight PowerMail Pro compowermail component 1.5.3 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impacts via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1532 info: name: Joomla!...

Joomla! Component SMEStorage - Local File Inclusion

A directory traversal vulnerability in the SMEStorage comsmestorage component before 1.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php. id: CVE-2010-1858 info: name: Joomla! Component SMEStorage - Local File...

Joomla! Component Highslide 1.5 - Local File Inclusion

A directory traversal vulnerability in the Highslide JS comhsconfig component 1.5 and 2.0.9 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1314 info: name: Joomla! Component Highslide 1.5 - Local File Inclusion...

Joomla! Component com_blog - Directory Traversal

A directory traversal vulnerability in index.php in the MyBlog commyblog component 3.0.329 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the task parameter. id: CVE-2010-1540 info: name: Joomla! Component comblog - Directory Traversal author: daffainfo severity:...

Joomla! Component Love Factory 1.3.4 - Local File Inclusion

A directory traversal vulnerability in the Love Factory comlovefactory component 1.3.4 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1957 info: name: Joomla! Component Love Factory 1.3.4 - Local File Inclusion...

Joomla! ChronoForums 2.0.11 - Local File Inclusion

Joomla! ChronoForums 2.0.11 avatar function is vulnerable to local file inclusion through unauthenticated path traversal attacks. This enables an attacker to read arbitrary files, for example the Joomla! configuration file which contains credentials. id: CVE-2021-28377 info: name: Joomla!...

Joomla! Component Visites 1.1 - MosConfig_absolute_path Remote File Inclusion

A PHP remote file inclusion vulnerability in core/include/myMailer.class.php in the Visites comjoomla-visites component 1.1 RC2 for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfigabsolutepath parameter. id: CVE-2010-2918 info: name: Joomla! Component Visit...

Joomla! Component redTWITTER 1.0 - Local File Inclusion

A drectory traversal vulnerability in the redTWITTER comredtwitter component 1.0.x including 1.0b11 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the view parameter to index.php. id: CVE-2010-1983 info: name: Joomla! Component redTWITTER 1.0 - Local File Inclusio...

Joomla! Component iNetLanka Multiple Map 1.0 - Local File Inclusion

A directory traversal vulnerability in the iNetLanka Multiple Map commultimap component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. dot dot in the controller parameter to index.php. id: CVE-2010-1953 info: name: Joomla! Component iNetLanka Multiple Map 1.0 - Local Fil...

Joomla! Component Foobla Suggestions 1.5.1.2 - Local File Inclusion

A directory traversal vulnerability in the Foobla Suggestions comfooblasuggestions component 1.5.1.2 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the controller parameter to index.php. id: CVE-2010-2920 info: name: Joomla! Component Foobla...