CVE-2009-4628

Joomla! com_tpdugg 1.1 - SQL Injection

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-4628. PoCs published by NoGe.

AI-analyzed exploit summary This Perl script exploits a blind SQL injection vulnerability in the Joomla component com_tpdugg version 1.1. It extracts data from the 'jos_users' table by brute-forcing character values through ASCII-based blind SQLi.

Description

SQL injection vulnerability in the TemplatePlaza.com TPDugg (com_tpdugg) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a tags action to index.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by NoGe · perlwebappsphp

https://www.exploit-db.com/exploits/9602

View Code ZIP pw:eip

This Perl script exploits a blind SQL injection vulnerability in the Joomla component com_tpdugg version 1.1. It extracts data from the 'jos_users' table by brute-forcing character values through ASCII-based blind SQLi.

Classification

Working Poc 95%

Attack Type

Sqli

Complexity

Moderate

Reliability

Reliable

Target: Joomla com_tpdugg component version 1.1

No auth needed

Prerequisites: Target URL with vulnerable com_tpdugg component · Valid ID parameter for exploitation

MITRE ATT&CK