COM_JOOMANAGER 2.0 -任意ファイルダウンロード

プラグインCOM_JOOMANAGERを使用してデータベースを一括収集。CMS: Joomlaから。プロジェクトはPython 2.xで開発。詳細はYouTube動画をご覧ください。

CVE: 2017-18345 リスク: 高セキュリティリスク

0day.Today-ID: 29950 ExploitDB-id: 44252

0day db-id: 16348 CXSecurity-id: WLB-2018030054

CVSS v3.0 深刻度とメトリクス: 基本スコア: 9.8 クリティカル

• https://vel.joomla.org/vel-blog/2020-joomanager-2-0-0-other
• https://www.cvedetails.com/cve/CVE-2017-18345/
• https://nvd.nist.gov/vuln/detail/CVE-2017-18345
• https://twitter.com/cvenew/status/1033829060588302337
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18345
• https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-18345.html
• https://launchpad.net/bugs/cve/CVE-2017-18345
• https://security-tracker.debian.org/tracker/CVE-2017-18345
• https://www.cvedetails.com/cve/CVE-2017-18345/
• https://vuldb.com/?id.123260
• https://infosec.cert-pa.it/cve-2017-18345.html
• https://0day.today/exploit/29950
• https://www.exploit-db.com/exploits/44252
• https://cxsecurity.com/issue/WLB-2018030054
• https://www.exploitalert.com/view-details.html?id=29114
• https://www.phpsecure.info/go/162082.html
• https://hackertor.com/2017/08/31/joomla-component-joomanager-2-0-0-arbitrary-file-download/
• https://buzzreddit.com/post/82glkb
• https://www.exploit-database.net/?id=96963
• http://reader.centrodouniverso.com.br/archives/544371

依存関係

• BeautifulSoup
• Threading
• urlparse
• urllib2
• argparse
• requests