CVE-2023-23752 PoC — [20230201] - Core - Improper access check in webservice endpoints

Source

https://github.com/0xWhoami35/CVE-2023-23752

Associated Vulnerability

Title:[20230201] - Core - Improper access check in webservice endpoints (CVE-2023-23752)
Description:An issue was discovered in Joomla! 4.0.0 through 4.2.7. An improper access check allows unauthorized access to webservice endpoints.

Readme

# CVE-2023-23752
 ### About
- This exploit is Authentication Bypass leaking username password administrator and also  leaking mysql config username , password , host and database
- Vulnerable Version only (4.00 => 4.28)<br>

 ## Usage

```
usage: exploit.sh [-h] [-u URL] [-t TARGETS]

CVE-2023-23752 - Authentication Bypass Information Leak on Joomla!

options:
  -h, --help            show this help message and exit
  -u URL, --url URL     Single URL to scan
  -t TARGETS, --targets TARGETS
                        File containing multiple URLs to scan
````

## Proof Of Concept (POC)
![Screenshot_2](pf.jpg)


- Single target
`bash exploit.sh -u https://example.com`

- Multiple Target
`bash exploit.sh -t targets.txt`

#### Refference:
- [EDB](https://www.exploit-db.com/exploits/51334)
- [VulnCheck](https://vulncheck.com/blog/joomla-for-rce)


## Donation

https://www.buymeacoffee.com/ardian0917s


## Blog
https://0xwhoami35.github.io/

## Disclaimer
We don't promote or encourage any illegal activity, all content provided by this repository is meant for research, educational, and threat detection purpose only.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →