CVE-2023-23752 — Authentication bypass exploit for Joomla CVE-2023-23752 that leaks administrator credentials and MySQL configuration from vulnerable versions 4.00-4.28. | Kitploit

Share

CVE-2023-23752

About

This exploit is Authentication Bypass leaking username password administrator and also leaking mysql config username , password , host and database
Vulnerable Version only (4.00 => 4.28)

Usage

usage: exploit.sh [-h] [-u URL] [-t TARGETS]

CVE-2023-23752 - Authentication Bypass Information Leak on Joomla!

options:
  -h, --help            show this help message and exit
  -u URL, --url URL     Single URL to scan
  -t TARGETS, --targets TARGETS
                        File containing multiple URLs to scan

Proof Of Concept (POC)

Screenshot_2

Single target bash exploit.sh -u https://example.com
Multiple Target bash exploit.sh -t targets.txt