CVE-2023-23752 PoC — Joomla 安全漏洞

Source

https://github.com/r3dston3/CVE-2023-23752

Associated Vulnerability

Title:Joomla 安全漏洞 (CVE-2023-23752)
Description:Joomla是美国Open Source Matters团队的一套使用PHP和MySQL开发的开源、跨平台的内容管理系统(CMS)。 Joomla 4.0.0版本至4.2.7版本存在安全漏洞，该漏洞源于不正确的访问检查，允许对web服务端点进行未经授权的访问。

Readme

This is a POC for CVE-2023-23752 written in Python that displays username and password information.

CVE-2023-23752 (Joomla! 4.0.0 < 4.2.8)

`Usage` = python3 exploit.py

The execution of the script is demonstrated in the GIF below:
![Example 1](img/poc.gif)

File Snapshot


 [4.0K]  /data/pocs/928013dbe3a9546450038de67b1146c47b6cd741
├── [ 633]  exploit.py
├── [4.0K]  img
│   └── [862K]  poc.gif
└── [ 259]  README.md

1 directory, 3 files

Shenlong Bot has cached this for you

Remarks

1. It is advised to access via the original source first.

2. If the original source is unavailable, please email f.jinxu#gmail.com for a local snapshot (replace # with @).

3. Shenlong has snapshotted the POC code for you. To support long-term maintenance, please consider donating. Thank you for your support.

Goal Reached Thanks to every supporter — we hit 100%!