CVE-2009-4599
JS Jobs (com_jsjobs) 1.0.5.6 - SQL Injection via md or oi Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2009-4599. PoCs published by d0lc3, kaMtiEz.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in Joomla's com_jsjobs component, specifically in the administrator panel. The vulnerability arises from improper handling of the 'cid' parameter in the GET request, allowing an attacker to extract sensitive information such as usernames, passwords, and emails from the database.
Description
Multiple SQL injection vulnerabilities in the JS Jobs (com_jsjobs) component 1.0.5.6 for Joomla! allow remote attackers to execute arbitrary SQL commands via (1) the md parameter in an employer view_company action to index.php or (2) the oi parameter in an employer view_job action to index.php.
Exploits (2)
This exploit demonstrates a SQL injection vulnerability in Joomla's com_jsjobs component, specifically in the administrator panel. The vulnerability arises from improper handling of the 'cid' parameter in the GET request, allowing an attacker to extract sensitive information such as usernames, passwords, and emails from the database.
This exploit demonstrates SQL injection vulnerabilities in the Joomla component com_jsjobs (version 1.0.5.6). It provides specific URLs and payloads to extract user credentials and database version information.