Exploitation Summary
EIP tracks 1 public exploit for CVE-2014-7981.
Includes Metasploit module auxiliary/gather/joomla_weblinks_sqli.
AI-analyzed exploit summary This Metasploit module exploits an unauthenticated SQL injection vulnerability in Joomla versions 3.2.2 and below, allowing arbitrary file reads via the `LOAD_FILE` function if the MySQL user has the necessary permissions. The exploit uses a UNION-based SQL injection to extract file contents from the server.
Description
SQL injection vulnerability in Joomla! CMS 3.1.x and 3.2.x before 3.2.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Exploits (1)
This Metasploit module exploits an unauthenticated SQL injection vulnerability in Joomla versions 3.2.2 and below, allowing arbitrary file reads via the `LOAD_FILE` function if the MySQL user has the necessary permissions. The exploit uses a UNION-based SQL injection to extract file contents from the server.