CVE-2009-4938
com_jvideo 0.3.11c Beta and 0.3.x - SQL Injection via user_id Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2009-4938. PoCs published by Chip d3 bi0s.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in the Joomla component com_jvideo. The PoC shows how an attacker can inject malicious SQL queries via the user_id parameter to extract sensitive information such as usernames and passwords from the database.
Description
SQL injection vulnerability in the JVideo! (com_jvideo) component 0.3.11c Beta and 0.3.x for Joomla! allows remote attackers to execute arbitrary SQL commands via the user_id parameter in a user action to index.php.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in the Joomla component com_jvideo. The PoC shows how an attacker can inject malicious SQL queries via the user_id parameter to extract sensitive information such as usernames and passwords from the database.