COM_JOOMANAGER 2.0 -任意文件下载

使用插件：COM_JOOMANAGER，从 CMS：Joomla 批量收集数据库，项目使用 python 2.x 开发，更多信息，请访问 YouTube 视频。

CVE: 2017-18345 风险: Security Risk High

0day.Today-ID: 29950 ExploitDB-id: 44252

0day db-id: 16348 CXSecurity-id: WLB-2018030054

CVSS v3.0 严重性和指标： 基础分数: 9.8 CRITICAL

• https://vel.joomla.org/vel-blog/2020-joomanager-2-0-0-other
• https://www.cvedetails.com/cve/CVE-2017-18345/
• https://nvd.nist.gov/vuln/detail/CVE-2017-18345
• https://twitter.com/cvenew/status/1033829060588302337
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-18345
• https://people.canonical.com/~ubuntu-security/cve/2017/CVE-2017-18345.html
• https://launchpad.net/bugs/cve/CVE-2017-18345
• https://security-tracker.debian.org/tracker/CVE-2017-18345
• https://www.cvedetails.com/cve/CVE-2017-18345/
• https://vuldb.com/?id.123260
• https://infosec.cert-pa.it/cve-2017-18345.html
• https://0day.today/exploit/29950
• https://www.exploit-db.com/exploits/44252
• https://cxsecurity.com/issue/WLB-2018030054
• https://www.exploitalert.com/view-details.html?id=29114
• https://www.phpsecure.info/go/162082.html
• https://hackertor.com/2017/08/31/joomla-component-joomanager-2-0-0-arbitrary-file-download/
• https://buzzreddit.com/post/82glkb
• https://www.exploit-database.net/?id=96963
• http://reader.centrodouniverso.com.br/archives/544371

依赖项

• BeautifulSoup
• Threading
• urlparse
• urllib2
• argparse
• requests