CVE-2008-0754
Joomla com_rapidrecipe 1.6.5 - SQL Injection via user_id or category_id Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2008-0754.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in the Joomla component 'com_rapidrecipe' by injecting a UNION-based SQL query to extract user credentials from the 'jos_users' table. The exploit is triggered by appending malicious input to the 'user_id' or 'category_id' parameters.
Description
Multiple SQL injection vulnerabilities in index.php in the Rapid Recipe (com_rapidrecipe) 1.6.5 component for Joomla! allow remote attackers to execute arbitrary SQL commands via (1) the user_id parameter in a showuser action or (2) the category_id parameter in a viewcategorysrecipes action.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in the Joomla component 'com_rapidrecipe' by injecting a UNION-based SQL query to extract user credentials from the 'jos_users' table. The exploit is triggered by appending malicious input to the 'user_id' or 'category_id' parameters.