CVE-2011-4804
NUCLEIcom_obsuggest < 1.8 - Path Traversal via Controller Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-4804. PoCs published by the_cyber_nuxbie. A Nuclei detection template is also available.
AI-analyzed exploit summary The exploit describes a local file inclusion (LFI) vulnerability in the 'com_kp' component of Joomla! due to improper input sanitization. An attacker can leverage this to include arbitrary local files or execute scripts in the context of the webserver process.
Description
Directory traversal vulnerability in the obSuggest (com_obsuggest) component before 1.8 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
Exploits (1)
The exploit describes a local file inclusion (LFI) vulnerability in the 'com_kp' component of Joomla! due to improper input sanitization. An attacker can leverage this to include arbitrary local files or execute scripts in the context of the webserver process.