
Proof-of-concept exploit for CVE-2023-23752 (Joomla 4.0.0-4.2.8) that extracts usernames and passwords via an information disclosure vulnerability.
This is a POC for CVE-2023-23752 written in Python that displays username and password information.
CVE-2023-23752 (Joomla! 4.0.0 < 4.2.8)
Usage = python3 exploit.py
The execution of the script is demonstrated in the GIF below:
