CVE-2010-4268
Pulse Infotech Flip Wall (com_flipwall) 1.1 - SQL Injection via catid Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-4268. PoCs published by FL0RiX.
AI-analyzed exploit summary This exploit demonstrates a SQL injection vulnerability in the Joomla component com_flipwall, allowing an attacker to extract admin credentials via a crafted URL. The PoC uses a UNION-based SQLi to retrieve username and password hashes from the jos_users table.
Description
SQL injection vulnerability in the Pulse Infotech Flip Wall (com_flipwall) component 1.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php.
Exploits (1)
This exploit demonstrates a SQL injection vulnerability in the Joomla component com_flipwall, allowing an attacker to extract admin credentials via a crafted URL. The PoC uses a UNION-based SQLi to retrieve username and password hashes from the jos_users table.