漏洞描述
My Little Forum 2.3.7 - Source Code Disclosure,此论坛为国外论坛，可以导致敏感的文件被下载。
My Little Forum download_backup_file 参数存在任意文件下载漏洞
PoC代码
暂无相关漏洞推荐
- POC CVE-2018-11709: WordPress wpForo Forum <= 1.4.11 - Cross-Site Scripting
- POC CVE-2018-14474: Orange Forum 1.4.0 - Open Redirect
- POC CVE-2021-24406: WordPress wpForo Forum < 1.9.7 - Open Redirect
- POC CVE-2021-24827: WordPress Asgaros Forum <1.15.13 - SQL Injection
- POC CVE-2021-27519: FUDForum 3.1.0 - Cross-Site Scripting
- POC CVE-2021-27520: FUDForum 3.1.0 - Cross-Site Scripting
- POC CVE-2021-28377: Joomla! ChronoForums 2.0.11 - Local File Inclusion
- POC CVE-2023-2309: wpForo Forum <= 2.1.8 - Cross-Site Scripting
- POC CVE-2023-41538: PHPJabbers PHP Forum Script 3.0 - Cross-Site Scripting
- POC gz-forum-script-xss: GZ Forum Script 1.8 - Cross-Site Scripting
- Plesk myLittleAdmin CVE-2020-13166 反序列化漏洞
- CodoForum CVE-2022-31854 文件上传漏洞
- WordPress wpForo Forum plugin CVE-2023-2249 本地文件包含漏洞