EDB-38797

functional

Joomla! 3.4.4 Component Content History - SQL Injection / Remote Code Execution (Metasploit)

view exploit source exploit_dbverifiedtype remoteauthor Metasploitpublished 2015-11-23catalog exploit_db
01

exploited CVEs (3)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2015-7858UShigh7.5Exploit
SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2015-7…
CVE-2015-7857UShigh7.5Exploit
SQL injection vulnerability in the getListQuery function in administrator/components/com_contenthistory/models/history.php in Joomla! 3.2 before 3.4.5 allows remote attackers to ex…
CVE-2015-7297UShigh7.5Exploit
SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2015-7…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan