Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-2607. PoCs published by Stack.
AI-analyzed exploit summary This Perl script exploits a SQL injection vulnerability in the Joomla com_pinboard component to extract usernames and password hashes from the jos_users table. It constructs a malicious URL with a UNION-based SQL injection payload and parses the response to display the extracted credentials.
Description
SQL injection vulnerability in the com_pinboard component for Joomla! allows remote attackers to execute arbitrary SQL commands via the task parameter in a showpic action to index.php.
Exploits (1)
This Perl script exploits a SQL injection vulnerability in the Joomla com_pinboard component to extract usernames and password hashes from the jos_users table. It constructs a malicious URL with a UNION-based SQL injection payload and parses the response to display the extracted credentials.