HTTP: Joomla Simple File Lister module Directory Traversal
This signature detects attempts to exploit a known vulnerability in the Joomla Simple File Lister module. It is due to insufficient input validation. Successful exploitation of this vulnerability allows an attacker to execute arbitrary code on the vulnerable system with the privileges of the Administrator user.
Extended Description
The Simple File Lister module for Joomla! is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks. Simple File Lister versions 1.0 and prior are vulnerable.
Affected Products
Joomla simple_file_lister
References
BugTraq: 49343
URL: http://www.joomla.org/ http://extensions.joomla.org/extensions/core-enhancements/file-management/15793
Short Name
HTTP:PHP:JOOMLA-FILE-LISTER
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
Directory File Joomla Lister Simple Traversal bid:49343 module
Release Date
09/13/2011
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3336
False Positive
Unknown
Vendors
Joomla