Exploitation Summary
EIP tracks 1 public exploit for EIP-2026-108171. PoCs published by Nikola Petrov.
AI-analyzed exploit summary This exploit targets Joomla 1.5.12 by leveraging an unauthorized file upload vulnerability to upload a PHP shell, followed by a local file inclusion (LFI) vulnerability to execute the shell and establish a reverse connection. The exploit automates the process of discovering the web root and bypassing authentication via TinyBrowser plugin weaknesses.
Description
Joomla! 1.5.12 - Connect Back
Exploits (1)
This exploit targets Joomla 1.5.12 by leveraging an unauthorized file upload vulnerability to upload a PHP shell, followed by a local file inclusion (LFI) vulnerability to execute the shell and establish a reverse connection. The exploit automates the process of discovering the web root and bypassing authentication via TinyBrowser plugin weaknesses.