Description
Joomla系统com_rsfiles插件本地文件下载漏洞，攻击者在未授权的情况下，通过get请求即可下载数据库配置文件，造成严重信息泄露，危害网站安全。
Joomla com_rsfiles 组件存在任意文件读取漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2007-4504
https://www.cve.org/CVERecord?id=CVE-2007-4504
https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2007-4504
https://www.exploit-db.com/exploits/4307
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2007/CVE-2007-4504.yaml
https://advisories.checkpoint.com/defense/advisories/public/2014/cpai-2014-2019.html/
https://exchange.xforce.ibmcloud.com/vulnerabilities/36222