cve/2009/CVE-2009-2014.md

CVE-2009-2014

Description

SQL injection vulnerability in the ComSchool (com_school) component 1.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the classid parameter in a showclass action to index.php.

POC

Reference

• https://www.exploit-db.com/exploits/8891
• https://www.exploit-db.com/exploits/8891

Github

No PoCs found on GitHub currently.