Exploitation Summary
EIP tracks 2 public exploits for CVE-2008-5051. PoCs published by boom3rang, His0k4.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in the Joomla component com_jb2 via the PostID parameter. The provided payload extracts user credentials from the jos_users table by leveraging a UNION-based SQL injection technique.
Description
SQL injection vulnerability in the JooBlog (com_jb2) component 0.1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the PostID parameter to index.php.
Exploits (2)
This exploit demonstrates a SQL injection vulnerability in the Joomla component com_jb2 via the PostID parameter. The provided payload extracts user credentials from the jos_users table by leveraging a UNION-based SQL injection technique.
This exploit is a Perl script that performs a blind SQL injection attack against the Joomla JooBlog component (CVE-2008-5051). It brute-forces the MD5 hash of the admin password by leveraging a time-based or boolean-based SQL injection vulnerability in the 'CategoryID' parameter.