knqyf263/CVE-2018-6376

PoC

Joomla!, Second Order SQL Injection

view exploit source poc_in_githubauthor knqyf263published 2018-02-12catalog poc_in_github

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-6376US	critical9.8	4.14% (91st)	Exploit	2018-01-30
In Joomla! before 3.8.4, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the Hathor postinstall message.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.