Exploitation Summary
EIP tracks 2 public exploits for CVE-2010-5028. PoCs published by v3n0m, Valentin. A Nuclei detection template is also available.
AI-analyzed exploit summary This is a SQL injection exploit for Joomla Component com_jejob 1.0, targeting the 'catid' parameter. The PoC demonstrates a union-based SQLi to extract user credentials from the 'jos_users' table.
Description
SQL injection vulnerability in the JExtensions JE Job (com_jejob) component 1.0 for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter in an item action to index.php.
Exploits (2)
This is a SQL injection exploit for Joomla Component com_jejob 1.0, targeting the 'catid' parameter. The PoC demonstrates a union-based SQLi to extract user credentials from the 'jos_users' table.
This is a writeup describing a Local File Inclusion (LFI) vulnerability in the Joomla Component JE Job. It provides example URIs and additional information on how to trigger MySQL errors and inject characters through the URL.