vendor:
N/A
by:
DevilZ TM By D3v1l
7,5
CVSS
HIGH
Local File Inclusion
98
CWE
Product Name: N/A
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2020
Joomla Component com_sbsfile Local File Inclusion
A Local File Inclusion (LFI) vulnerability exists in Joomla Component com_sbsfile. An attacker can exploit this vulnerability to include local files on the server. The vulnerable parameter is ‘controller’. An attacker can send a crafted HTTP request with malicious ‘controller’ parameter to include local files on the server.
Mitigation:
The best way to mitigate LFI vulnerabilities is to restrict the types of files that can be uploaded to the server. Additionally, input validation should be performed to ensure that the user input is valid and does not contain malicious code.
