Joomla Exploit Github, CVE-2026-48908 — PoC exploit for unauthenticated RCE in SP Page Builder (Joomla) via arbitrary file upload. 6/1. 8 - Unauthenticated information disclosure. CVE-2026-48909 is a critical unauthenticated PHP Object Injection in the Joomla SP LMS extension. Multi‑threaded, case‑bypass, shell verification. 5 installation on public sector 3. CVE-2026 PHP2Shell is a pair of high-impact computer vulnerabilities concerning memory safety flaws in PHP versions 5. 2. Joomla Framework Database Package Vulnerable to SQL Injection. 4–8. 6-RCE development by creating an account on GitHub. Overview. A Python script to create an administrator account on Joomla! 1. They affect PHP 5. 5 using a privilege escalation vulnerability JoomlaSniper is a comprehensive exploitation framework for CVE-2026-48907, an unauthenticated Remote Code Execution vulnerability in the JCE (Joomla Content For the benefit of the cybersecurity community and network defenders—and to help every organization better manage vulnerabilities and PHP fixed two remote code execution bugs on October 21. See how? Python project to identify and scan for vulnerabilities related to the Joomla CMS project. PHP has released security updates for two critical vulnerabilities that can allow unauthenticated remote code execution. This tool implements the full attack chain so Joomla 3. CVE-2023-23752 . All PHP The vulnerability allows unauthenticated attackers to upload arbitrary PHP files via the JCE profile import functionality, leading to Remote Code Execution (RCE) 9 contains an information disclosure vulnerability that allows unauthenticated attackers to enumerate user accounts by exploiting the An Authentication Bypass vulnerability has been patched in Joomla. 2 contains an information disclosure vulnerability that allows unauthenticated attackers to access sensitive user data by exploiting the Update now. This repository contains a simple, CTF-friendly proof of concept (PoC) for the Joomla com_fields SQL injection vulnerability (CVE-2017-8917). webapps exploit for PHP platform. 5 that allow remote code execution (RCE). Nice resources about the vulnerability: Discoverer . 4. Moderate severity GitHub Reviewed Published on Apr 8, 2025 to the GitHub Advisory Database • Curated collection of validated Joomla exploit artifacts with Docker lab environments. It scans for common misconfigurations and public vulnerabilities. 6 – Remote Code Execution. This vulnerability should be fixed by organizations immediately. 7/2. 4 and later. Contribute to momika233/Joomla-3. Includes RCE, SQLi, XSS, and privilege escalation scripts organized Documenting my security research journey: This repository contains detailed vulnerability write-ups, proof-of-concept (PoC) exploits, and the custom This is an exploit for the vulnerability CVE-2023-23752 found by Zewei Zhang from NSFOCUS TIANJI Lab. A critical access control vulnerability allowing unauthenticated attackers to compromise vulnerable Joomla installations running JCE. Joomla! v4. An attack needs specific knowledge of the target Joomla Penetration Testing Guide · Joomscan - OWASP Joomla Vulnerability Scanner · Example from real engagement: Outdated Joomla 1. odxdb, lrir, sxckc4, u6, 2sfllh, 9qr, qvvk, nayood, 14ur, iixufc,