CVE-2019-10945

Code Conversion to Python 3 This code is taken from Joomla! Core 1.5.0 - 3.9.4 - Directory Traversal / Authenticated Arbitrary File Deletion and was converted to Python 3 to suit the exercise in Academy for Module "Attacking Commoon Applications" and section "Attacking Joomla". The original code...

rusty_joomla_rce

Rusty Joomla RCE Details You can find technical details here: https://1day.dev/notes/Rusty-Joomla-Remote-Code-Execution...

CVE-2020-11890

Made by HK CVE-2020-11890: Improper input validations in the usergroup table class could lead to a broken ACL configuration to RCE Link https://developer.joomla.org/security-centre/810-20200402-core-missing-checks-for-the-root-usergroup-in-usergroup-table.html PoC Affected version: Joomla core...

JoomlaScan

Joomla Scan A free and open source software to find the components installed in Joomla CMS, built out of the ashes of Joomscan. Features Scanning the Joomla CMS sites in search of components/extensions database of more than 600 components; Locate the browsable folders of component Index of ...;...

CVE-2026-65761

CVE-2026-65761 — EasyStore Joomla Pre-Auth SQL Injection filtersortby Direction → ORDER BY Injection → Full DB Read Overview CVE-2026-65761 CVSS 9.3 Critical is an unauthenticated SQL injection in EasyStore for Joomla by JoomShaper, affecting versions ≤ 2.0.1. The filtersortby product listing...

joomla_exploits

Joomla Exploits This repository contains selected Joomla exploit artifacts validated against real Docker Joomla environments. The collection is split by practical offensive utility. real-impact Exploits with direct security impact: RCE, file upload to code execution, SQL injection, sensitive...

rapidscan

🟥 RapidScan v1.2 - The Multi-Tool Web Vulnerability Scanner RapidScan has been ported to Python3 i.e. v1.2. The Python2.7 codebase is available on v1.1 releases section. Download and use it if you still haven't upgraded to Python 3. Kindly note that the v1.1 Python2.7 will not be enhanced further...

Joomla-CMS-Full-Lifecycle-Pentest

Full-Lifecycle CMS Penetration Testing Joomla 4.2.5 📌 Project Overview This project demonstrates a full-lifecycle penetration test conducted on an open-source CMS Joomla 4.2.5. The entire test follows standard methodologies OWASP/PTES from lab deployment up to exploitation, post-exploitation, and...

CVE-2021-23132

CVE-2021-23132 commedia allowed paths that are not intended for image uploads to RCE. CVE-2020-24597 Directory traversal in commedia to RCE Two CVEs are the same. PoC Full Affected version: Joomla core =3.9.24 User requirement: Admin account Not Superadmin Gain access: Create superadmin, then...

masta-cve-2026-48907

MASTA CVE-2026-48907 Scanner Single-file, self-contained scanner for Joomla! JCE Editor Author: Hussein Mohamed masta ghimau !CAUTION 🚨 DISCLAIMER — READ BEFORE USE THIS IS AN INTRUSIVE SECURITY TESTING TOOL. THIS TOOL IS FOR AUTHORIZED SECURITY ASSESSMENTS ONLY. Scanning systems you do NOT own o...

CVE-2023-23752-poc

Affected versions: 4.0.0 = 4.2.8 Joomla 3 and below are not affected by this vulnerability. http://127.0.0.1/Joomla/api/index.php/v1/config/application?public=true This API is used to obtain the most important configuration information of the website, including the database username and password...

CVE-2026-48907-

CVE-2026-48907 — Joomla JCE Editor Unauthenticated RCE Scanner & Exploit CVSS 10.0 | CWE-284 | CISA KEV | EPSS 80% A Python-based vulnerability scanner and exploitation tool for CVE-2026-48907 , a critical unauthenticated remote code execution vulnerability in the JCE Joomla Content Editor...

CVE-2026-57827

CVE-2026-57827 — RSFiles! Joomla Component Unauthenticated File Upload RCE Split-Controller Upload Bypass → Direct Write Task → /downloads/shell.php → RCE Overview CVE-2026-57827 is a critical-severity CVSS 9.8 unauthenticated arbitrary file upload vulnerability in RSFiles! comrsfiles, a widely...

CVE-2023-23752

CVE-2023-23752 Exploit for CVE-2023-23752 4.0.0 GET /api/index.php/v1/config/application?public=true HTTP/1.1 Host: 10.9.49.205 User-Agent: curl/7.68.0 Accept: / Mark bundle as not supporting multiuse HTTP/1.1 200 OK Date: Mon, 20 Mar 2023 15:14:05 GMT Server: Apache/2.4.41 Ubuntu x-frame-options...

CVE-2023-23752

CVE-2023-23752 Joomla! v4.2.8 - Unauthenticated information disclosure To execute this script, we need to install few missing gems: sudo gem install httpx sudo gem install docopt sudo gem install paint ruby exploit.rb http://dev.devvortex.htb...

CVE-2023-23752

CVE-2023-23752 Joomla Information disclosure exploit code written in C++...

CVE-2023-23752

This is a POC for CVE-2023-23752 written in Python that displays username and password information. CVE-2023-23752 Joomla! 4.0.0 4.2.8 Usage = python3 exploit.py The execution of the script is demonstrated in the GIF below:...

CVE-2019-6263-Joomla-POC

CVE-2019-6263-Joomla-POC...

CVE-2017-8917-Joomla-370-SQL-Injection

This repository does not have a README...

CVE-2023-23752

CVE-2023-23752 CVE-2023-23752 Data Extractor Build git clone https://github.com/JohnDoeAnonITA/CVE-2023-23752 cd CVE-2023-23752 go build . Usage CVE-2023-23752.exe -h|--help -u|--url "" -t|--type 1|2 Help / / / | // //// // //.'///'/ // //// / CVE-2023-23752 Data Extractor v0.1 Arguments: -h --he...