Exploitation Summary
EIP tracks 1 public exploit for CVE-2009-4099. PoCs published by Yogyacarderlink Crew.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Joomla's com_gcalendar component (version 1.1.2). It injects a UNION-based SQL query to extract usernames and password hashes from the jos_users table.
Description
SQL injection vulnerability in the Google Calendar GCalendar (com_gcalendar) component 1.1.2, 2.1.4, and possibly earlier versions for Joomla! allows remote attackers to execute arbitrary SQL commands via the gcid parameter. NOTE: some of these details are obtained from third party information.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in Joomla's com_gcalendar component (version 1.1.2). It injects a UNION-based SQL query to extract usernames and password hashes from the jos_users table.