SQL Injection Vulnerability in JoomPortfolio Component for Joomla!
CVE-2009-4428

Currently unrated

Key Information:

Vendor: Joomplace
Status: Com Joomportfolio
Vendor: CVE Published:; 28 December 2009

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2009-4428?

A SQL injection vulnerability exists in the JoomPortfolio component version 1.0.0 for Joomla!, allowing remote attackers to manipulate SQL queries through the 'secid' parameter within the 'showcat' action of index.php. This flaw can lead to unauthorized database access and potential data exposure, highlighting the importance of proper input validation and sanitization in web applications. Security measures should be implemented to prevent exploitation of this vulnerability.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2009-4428 - Proof of Concept