Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-2014. PoCs published by Chip d3 bi0s.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in the Joomla component com_school (version 1.4). The PoC shows how an attacker can inject malicious SQL code via the 'classid' parameter to extract sensitive information such as usernames and passwords from the database.
Description
SQL injection vulnerability in the ComSchool (com_school) component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the classid parameter in a showclass action to index.php.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in the Joomla component com_school (version 1.4). The PoC shows how an attacker can inject malicious SQL code via the 'classid' parameter to extract sensitive information such as usernames and passwords from the database.