Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-2099. PoCs published by Mehmet Ince.
AI-analyzed exploit summary This Perl script exploits a blind SQL injection vulnerability in the Joomla component com_ijoomla_rss to extract the MD5 password hash of a specified user. It uses a brute-force approach to determine each character of the hash by checking for a specific string in the HTTP response.
Description
SQL injection vulnerability in the iJoomla RSS Feeder (com_ijoomla_rss) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the cat parameter in an xml action to index.php.
Exploits (1)
This Perl script exploits a blind SQL injection vulnerability in the Joomla component com_ijoomla_rss to extract the MD5 password hash of a specified user. It uses a brute-force approach to determine each character of the hash by checking for a specific string in the HTTP response.