Exploitation Summary
EIP tracks 2 public exploits for CVE-2010-5044. PoCs published by XroGuE, d0lc3.
AI-analyzed exploit summary This exploit demonstrates a remote code execution vulnerability in Sphider 1.3.x due to improper input validation in the 'language' parameter in settings/conf.php. The vulnerability allows arbitrary command execution via a crafted GET request.
Description
SQL injection vulnerability in models/log.php in the Search Log (com_searchlog) component 3.1.0 for Joomla! allows remote authenticated users, with Public Back-end privileges, to execute arbitrary SQL commands via the search parameter in a log action to administrator/index.php. NOTE: some of these details are obtained from third party information.
Exploits (2)
This exploit demonstrates a remote code execution vulnerability in Sphider 1.3.x due to improper input validation in the 'language' parameter in settings/conf.php. The vulnerability allows arbitrary command execution via a crafted GET request.
This exploit demonstrates a SQL injection vulnerability in Joomla's com_searchlog component, specifically in the 'search' parameter. The PoC provides a clear example of how to inject malicious SQL queries via a POST request to exploit unsanitized input.