CVE-2009-2102

Joomla com_jumi 2.0.3 - SQL Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-2102. PoCs published by Chip d3 bi0s.

AI-analyzed exploit summary This exploit demonstrates a blind SQL injection vulnerability in the Joomla com_jumi component via the 'fileid' parameter. It includes a Perl script to automate the extraction of user credentials from the database.

Description

SQL injection vulnerability in the Jumi (com_jumi) component 2.0.3 and possibly other versions for Joomla allows remote attackers to execute arbitrary SQL commands via the fileid parameter to index.php.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Chip d3 bi0s · textwebappsphp
https://www.exploit-db.com/exploits/8968

This exploit demonstrates a blind SQL injection vulnerability in the Joomla com_jumi component via the 'fileid' parameter. It includes a Perl script to automate the extraction of user credentials from the database.

Classification
Working Poc 95%
Attack Type
Sqli
Complexity
Moderate
Reliability
Reliable
Target: Joomla com_jumi component
No auth needed
Prerequisites: Target must have the vulnerable com_jumi component installed · Attacker must be able to send HTTP requests to the target
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Exploit, Third Party Advisory exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/8968
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/35384
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/55112
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/35465

Scores

EPSS 0.0204
EPSS Percentile 78.6%

Details

CWE
CWE-89
Status published
Products (1)
com_jumi/com_jumi 2.0.3
Published Jun 17, 2009
Tracked Since Feb 18, 2026