CVE-2018-6376 PoC — Joomla! SQL注入漏洞

Source

https://github.com/knqyf263/CVE-2018-6376

Associated Vulnerability

Title: Joomla! SQL注入漏洞 (CVE-2018-6376)
Description:In Joomla! before 3.8.4, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the Hathor postinstall message.

Description

Joomla!, Second Order SQL Injection

Readme

# CVE-2018-6376
Joomla!, Second Order SQL Injection

## Start Joomla!
```
$ docker-compose up -d
```

## Access localhost via browser
http://localhost:10080

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →