CVE-2020-37224
HIGHJoomla J2 JOBS 1.3.0 Authenticated SQL Injection via sortby
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2020-37224. PoCs published by Mehmet Kelepçe.
AI-analyzed exploit summary This exploit demonstrates an authenticated SQL injection vulnerability in Joomla! J2 JOBS 1.3.0 via the 'sortby' parameter. The provided HTTP POST request shows how an attacker can inject malicious SQL payloads, and a sqlmap command is included for further exploitation.
Description
Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'sortby' parameter. Attackers can send POST requests to the administrator index with malicious 'sortby' values to extract sensitive database information.
Exploits (1)
This exploit demonstrates an authenticated SQL injection vulnerability in Joomla! J2 JOBS 1.3.0 via the 'sortby' parameter. The provided HTTP POST request shows how an attacker can inject malicious SQL payloads, and a sqlmap command is included for further exploitation.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N