Joomla-JCK-Editor-6.4.4-SQL-Injection

Joomla-JCK-Editor-6.4.4-SQL注入 Joomla! 的 JCK Editor Jtreelink 插件未能正确解析用户输入，导致 SQL 注入。 此利用工具利用此安全漏洞，转储管理员凭据，并可能上传 PHP RCE shell。 漏洞利用标题: Joomla JCK Editor 6.4.4 SQL注入 Google Dork: inurl:/plugins/editors/jckeditor/plugins/jtreelink/ 日期: 05/03/2021 漏洞利用作者: Nicholas Ferreira 厂商主页:...

CVE-2018-17254

CVE-2018-17254 root@kitploit: Exploit Title: Joomla JCK Editor 6.4.4 - Inyección SQL 'parent' Google Dork: inurl:/plugins/editors/jckeditor/plugins/jtreelink/ Página del vendedor: http://docs.arkextensions.com/downloads/jck-editor Versión: 6.4.4 Probado en: Debian 10 Ubuntu Windows 11/10 CVE :...

CVE-2018-17254

The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter...

CVE-2018-17254

The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter...

CVE-2018-17254

The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter...

CVE-2018-17254

Summary: CVE-2018-17254 affects Joomla! JCK Editor component 6.4.4. The vulnerability is an SQL Injection in the jtreelink/dialogs/links.php parent parameter, enabling attacker-controlled SQL execution. The issue is documented with explicit exploitation details (e.g., UNION-based payloads) in pub...