COM_JOOMANAGER 2.0 - DESCARGA ARBITRARIA DE ARCHIVOS

Recolectando bases de datos en masa con el plugin: COM_JOOMANAGER, del CMS: Joomla. Proyecto desarrollado en python 2.x. Para más información, accede al video de YouTube.

CVE: 2017-18345 Riesgo: Alto riesgo de seguridad

0day.Today-ID: 29950 ExploitDB-id: 44252

0day db-id: 16348 CXSecurity-id: WLB-2018030054

Gravedad y Métricas CVSS v3.0: Puntuación Base: 9.8 CRÍTICA

• https://vel.joomla.org/vel-blog/2020-joomanager-2-0-0-other
• https://www.cvedetails.com/cve/CVE-2017-18345/
• https://nvd.nist.gov/vuln/detail/CVE-2017-18345
• https://twitter.com/cvenew/status/1033829060588302337
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18345
• https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-18345.html
• https://launchpad.net/bugs/cve/CVE-2017-18345
• https://security-tracker.debian.org/tracker/CVE-2017-18345
• https://www.cvedetails.com/cve/CVE-2017-18345/
• https://vuldb.com/?id.123260
• https://infosec.cert-pa.it/cve-2017-18345.html
• https://0day.today/exploit/29950
• https://www.exploit-db.com/exploits/44252
• https://cxsecurity.com/issue/WLB-2018030054
• https://www.exploitalert.com/view-details.html?id=29114
• https://www.phpsecure.info/go/162082.html
• https://hackertor.com/2017/08/31/joomla-component-joomanager-2-0-0-arbitrary-file-download/
• https://buzzreddit.com/post/82glkb

alt tag

DEPENDENCIAS

• BeautifulSoup
• Threading
• urlparse
• urllib2
• argparse
• requests