Joomify CVE-2023-23752

Walkthrough summary

Joomify CVE-2023-23752 TryHackMe walkthrough with 8 answered prompts and lab methodology notes.

Sample prompts covered

• What folder name contains the index.php code responsible for handling the API-based calls?
  Open the walkthrough page to inspect the full answer and command flow.
• What folder name contains all the admin-related files and code in Joomla?
  Open the walkthrough page to inspect the full answer and command flow.
• What GET request variable name can the attacker manipulate to trigger CVE 2023-23752?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the admin user's email address for the vulnerable Joomla application?
  Open the walkthrough page to inspect the full answer and command flow.
• What is the password for the database user root?
  Open the walkthrough page to inspect the full answer and command flow.