CVE-2015-7857
Joomla! 3.2-3.4.4 - SQL Injection via list[select] Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2015-7857.
PoCs published by Metasploit, Asaf Orpani, including Metasploit module exploits/unix/webapp/joomla_contenthistory_sqli_rce.
AI-analyzed exploit summary This Metasploit module exploits a SQL injection vulnerability in Joomla's Content History component to retrieve admin session cookies, then leverages them to create a malicious PHP template file for remote code execution.
Description
SQL injection vulnerability in the getListQuery function in administrator/components/com_contenthistory/models/history.php in Joomla! 3.2 before 3.4.5 allows remote attackers to execute arbitrary SQL commands via the list[select] parameter to index.php.
Exploits (2)
This Metasploit module exploits a SQL injection vulnerability in Joomla's Content History component to retrieve admin session cookies, then leverages them to create a malicious PHP template file for remote code execution.
This Metasploit module exploits a SQL injection vulnerability in Joomla's Content History component to retrieve admin session cookies, then uses them to authenticate and achieve remote code execution by creating a malicious PHP template file.