keyuan15/cve-2023-23752Python exploit script for CVE-2023-23752 targeting unauthorized REST API access in Joomla 4.0.0–4.2.7, supporting single and batch scanning with proxy.
Joomla Unauthorized Access Vulnerability CVE-2023-23752
Joomla is an open-source content management system (CMS), written in PHP, supporting multiple database systems such as MySQL, MSSQL, and PostgreSQL. Improper access restrictions lead to unauthorized access to the server REST API interface.
Affected versions: Joomla 4.0.0 - 4.2.7
optional arguments:
-h, --help show this help message and exit
-u URL, --url URL 指定url地址
-f FILE, --file FILE 指定文件
-p PROXY, --proxy PROXY
设置代理，如socks5://127.0.0.1:8080 [clash]
-o OUTPUT, --output OUTPUT
将结果输出到文件
# 单个url
python CVE-2023-23752.py -u url
# 批量扫描，输出存在漏洞的url
python CVE-2023-23752.py -f file.txt -o out_file.csv
# 使用代理批量扫描
python CVE-2023-23752.py -f file.txt -p socks5://127.0.0.1:8080