Exploitation Summary
EIP tracks 1 public exploit for CVE-2012-1116. PoCs published by Colin Wong.
AI-analyzed exploit summary This Perl script exploits a time-based SQL injection vulnerability in Joomla! versions prior to 2.5.1. It uses the `sleep()` function to infer data from the database, including database names, table structures, and sensitive information like admin passwords or file contents.
Description
SQL injection vulnerability in Joomla! 1.7.x and 2.5.x before 2.5.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Exploits (1)
This Perl script exploits a time-based SQL injection vulnerability in Joomla! versions prior to 2.5.1. It uses the `sleep()` function to infer data from the database, including database names, table structures, and sensitive information like admin passwords or file contents.