Exploitation Summary
CVE-2015-7858 has been observed exploited in the wild (reported by VulnCheck KEV).
EIP tracks 3 public exploits from researchers including Metasploit, Asaf Orpani, including a Metasploit module exploits/unix/webapp/joomla_contenthistory_sqli_rce.
AI-analyzed exploit summary This Metasploit module exploits a SQL injection vulnerability in Joomla's Content History component to retrieve admin session cookies, then leverages them to create a malicious PHP template file for remote code execution.
Description
SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands via unspecified vectors, a different vulnerability than CVE-2015-7297.
Exploits (3)
This Metasploit module exploits a SQL injection vulnerability in Joomla's Content History component to retrieve admin session cookies, then leverages them to create a malicious PHP template file for remote code execution.
This repository contains a functional Python exploit for Joomla 3.2 to 3.4.4 SQL injection vulnerabilities (CVE-2015-7297, CVE-2015-7857, CVE-2015-7858). It automates the extraction of database credentials, user information, and session IDs via crafted SQL injection payloads.
This Metasploit module exploits a SQL injection vulnerability in Joomla's Content History component to retrieve admin session cookies, then leverages authenticated access to upload a malicious PHP template file for remote code execution.