CVE-2012-2688

This Python script exploits CVE-2012-2688, a remote code execution vulnerability in PHP's query string parameter handling. It leverages PHP's allow_url_include and auto_prepend_file directives to execute arbitrary commands via a crafted POST request.

This repository contains a functional Python exploit for CVE-2017-18345, targeting an arbitrary file download vulnerability in the Joomanager component for Joomla. The script automates the exploitation process by sending crafted HTTP requests to download sensitive files like configuration.php.