Lucene search

K
packetstormIndoushkaPACKETSTORM:178008
HistoryApr 10, 2024 - 12:00 a.m.

Joomla SP Page Builder 5.2.7 SQL Injection

2024-04-1000:00:00
indoushka
packetstormsecurity.com
97
joomla
sp page builder
sql injection
vulnerability
google dork
mozilla firefox
windows 10
french
injection payload
security advisory

7.4 High

AI Score

Confidence

Low

`====================================================================================================================================  
| # Title : SP Page Builder 5.2.7 Sql injection Vulnerability |  
| # Author : indoushka |  
| # Tested on : windows 10 Franรงais V.(Pro) / browser : Mozilla firefox 69.0(32-bit) |  
| # Vendor : https://extensions.joomla.org/extension/sp-page-builder/ |  
====================================================================================================================================  
  
poc :  
  
[+] Dorking ฤฐn Google Or Other Search Enggine.  
  
[+] use payload : /index.php?option=com_sppagebuilder&view=page&id=22&Itemid=251 <===== inject here  
  
[+] http://127.0.0.1/cdgi36fr/index.php?option=com_sppagebuilder&view=page&id=22&Itemid=251  
  
  
Greetings to :=================================================================  
jericho * Larry W. Cashdollar * shadow_00715 * LiquidWorm * Hussin-X * D4NB4R |  
===============================================================================  
`

7.4 High

AI Score

Confidence

Low