Exploitation Summary
EIP tracks 1 public exploit for CVE-2007-4128. PoCs published by Mehmet Ince.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Joomla's com_gmaps component (version 1.00) by injecting a UNION-based query to extract username and password from the jos_users table. The attack leverages improper input sanitization in the mapId parameter.
Description
SQL injection vulnerability in index.php in the Firestorm Technologies GMaps (com_gmaps) 1.00 component for Joomla! allows remote attackers to execute arbitrary SQL commands via the mapId parameter in a viewmap action.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in Joomla's com_gmaps component (version 1.00) by injecting a UNION-based query to extract username and password from the jos_users table. The attack leverages improper input sanitization in the mapId parameter.