exploit-joomla

Простой эксплойт, использующий CVE-2015-7297, CVE-2015-7857 и CVE-2015-7858 для перечисления пользователей с паролем из БД

Exploit Title : Joomla 3.2 to 3.4.4 Remote SQL Injection Mass Exploit

Date : 12-09-2020

Requirements : Python 3.4.x , Requests module (python -m pip install requests)

Code found on : https://github.com/kally-life/exploit-joomla

Vulnerability found by : trustwave.com

Exploit Author : Kally-life Italian Pentester

Tested on : Windows 8.1 / Ubuntu 14.04

CVE : CVE-2015-7297, CVE-2015-7857 and CVE-2015-7858

Change Google Dork at line 106