漏洞描述
Joomla!是一套全球知名的内容管理系统。Joomla!是使用PHP语言加上MySQL数据库所开发的软件系统。漏洞本质是Joomla对session数据处理不当，未经授权的攻击者可以发送精心构造的恶意HTTP 请求，获取服务器权限，实现远程命令执行。
Joomla 3.4.6 远程代码执行漏洞
PoC代码
暂无相关漏洞推荐
- CNVD-2019-34135: Joomla configuration.php RCE
- POC CVE-2007-4504: Joomla! RSfiles <=1.0.2 - Local File Inclusion
- POC CVE-2008-4668: Joomla! Image Browser 0.1.5 rc2 - Local File Inclusion
- POC CVE-2008-4764: Joomla! <=2.0.0 RC2 - Local File Inclusion
- POC CVE-2008-6080: Joomla! ionFiles 4.4.2 - Local File Inclusion
- POC CVE-2008-6172: Joomla! Component RWCards 3.0.11 - Local File Inclusion
- POC CVE-2008-6222: Joomla! ProDesk 1.0/1.2 - Local File Inclusion
- POC CVE-2009-1496: Joomla! Cmimarketplace 0.1 - Local File Inclusion
- POC CVE-2009-2015: Joomla! MooFAQ 1.0 - Local File Inclusion
- POC CVE-2009-2100: Joomla! JoomlaPraise Projectfork 2.0.10 - Local File Inclusion
- POC CVE-2009-3053: Joomla! Agora 3.0.0b - Local File Inclusion
- POC CVE-2009-3318: Joomla! Roland Breedveld Album 1.14 - Local File Inclusion
- POC CVE-2009-4202: Joomla! Omilen Photo Gallery 0.5b - Local File Inclusion