CVE-2009-3438
JoomlaFacebook (com_facebook) - SQL Injection via id Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2009-3438. PoCs published by kaMtiEz.
AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in the JoomlaFacebook component for Joomla! by injecting a UNION-based SQL query to extract user credentials from the database.
Description
SQL injection vulnerability in the JoomlaFacebook (com_facebook) component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a student action to index.php.
Exploits (2)
This exploit demonstrates an SQL injection vulnerability in the JoomlaFacebook component for Joomla! by injecting a UNION-based SQL query to extract user credentials from the database.
This exploit demonstrates a SQL injection vulnerability in the Joomla com_facebook component, allowing an attacker to extract user credentials from the jos_users table via a crafted UNION-based SQL query.