CVE-2023-23752

Related Files

Joomla API Improper Access Checks

Posted Sep 1, 2024

Authored by h00die, Tianji Lab | Site metasploit.com

Joomla versions between 4.0.0 and 4.2.7, inclusive, contain an improper API access vulnerability. This vulnerability allows unauthenticated users access to webservice endpoints which contain sensitive information. Specifically for this module we exploit the users and config/application endpoints. This Metasploit module was tested against Joomla 4.2.7 running on Docker.

tags | exploit

advisories | CVE-2023-23752

SHA-256 | fa67ae7e6f213f19e195eecd75ea212d3daefe54df94381a906f0a5269cb2249

Download | Favorite | View

Joomla 4.2.8 Information Disclosure

Posted May 21, 2024

Authored by d4t4s3c

Joomla versions 4.2.8 and below remote unauthenticated information disclosure exploit.

tags | exploit, remote, info disclosure

advisories | CVE-2023-23752

SHA-256 | 626134242ae4ae7b4c28853f3d05cf44659ed92ca2ceb96b914b80675d522cdc

Download | Favorite | View

Joomla! 4.2.7 Unauthenticated Information Disclosure

Posted Mar 24, 2023

Authored by Alexandre Zanni, Zewei Zhang

Joomla! versions prior to 4.2.8 suffer from an unauthenticated information disclosure vulnerability.

tags | exploit, info disclosure

advisories | CVE-2023-23752

SHA-256 | 417f9d6c26b8a1e0793bc9e5aaf8fe1808d869eb6f3e3c535d5813d71577788d

Download | Favorite | View