漏洞描述
Joomla内容编辑器Com_JCE2.5.24版本数据库备份信息泄漏 攻击者在未授权的情况下，通过访问/sql/目录下的sql文件，即可看到网站所执行的sql语句，造成严重信息泄露，危害网站安全。
Joomla Com_JCE 组件存在敏感信息泄露
PoC代码
暂无相关漏洞推荐
- CNVD-2019-34135: Joomla configuration.php RCE
- POC CVE-2007-4504: Joomla! RSfiles <=1.0.2 - Local File Inclusion
- POC CVE-2008-4668: Joomla! Image Browser 0.1.5 rc2 - Local File Inclusion
- POC CVE-2008-4764: Joomla! <=2.0.0 RC2 - Local File Inclusion
- POC CVE-2008-6080: Joomla! ionFiles 4.4.2 - Local File Inclusion
- POC CVE-2008-6172: Joomla! Component RWCards 3.0.11 - Local File Inclusion
- POC CVE-2008-6222: Joomla! ProDesk 1.0/1.2 - Local File Inclusion
- POC CVE-2009-1496: Joomla! Cmimarketplace 0.1 - Local File Inclusion
- POC CVE-2009-2015: Joomla! MooFAQ 1.0 - Local File Inclusion
- POC CVE-2009-2100: Joomla! JoomlaPraise Projectfork 2.0.10 - Local File Inclusion
- POC CVE-2009-3053: Joomla! Agora 3.0.0b - Local File Inclusion
- POC CVE-2009-3318: Joomla! Roland Breedveld Album 1.14 - Local File Inclusion
- POC CVE-2009-4202: Joomla! Omilen Photo Gallery 0.5b - Local File Inclusion