CVE-2008-2568
Joomla com_simpleshop < 3.4 - SQL Injection via catid Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2008-2568. PoCs published by eXeCuTeR, His0k4.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Joomla's com_simpleshop component. It allows an attacker to extract user credentials (username and password) from the jos_users table via a crafted URL.
Description
SQL injection vulnerability in the Simple Shop Galore (com_simpleshop) component 3.4 and earlier for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in a browse action to index.php.
Exploits (2)
This exploit demonstrates a SQL injection vulnerability in Joomla's com_simpleshop component. It allows an attacker to extract user credentials (username and password) from the jos_users table via a crafted URL.
This is a SQL injection exploit for the Joomla simpleshop component. It demonstrates how to inject malicious SQL queries via the 'catid' parameter to extract sensitive information such as usernames and passwords from the database.