What happened
ProofCMS toolkit detects and validates vulnerabilities in Joomla and WordPress.
Affected versions
Unknown product: See original advisory Fixed: See vendor advisory.
Why it matters
This source correlation may provide earlier visibility while structured CVE metadata is still being updated.
Detection & mitigation
- Review the original advisory and validate affected versions.
- Apply vendor-provided updates or mitigations when available.
Public PoC references
RepositoryAuthorFirst seenReference
Exploit-DB 38977Joomla! 1.5 < 3.4.5 - Object Injection Remote Command ExecutionSec-12015-12-15VerifiedExploit-DB 39033Joomla! 1.5 < 3.4.6 - Object Injection 'x-forwarded-for' Header Remote Code ExecutionAndrew McNicol2015-12-18VerifiedSploitusProofCMS toolkit detects and validates vulnerabilities in Joomla and WordPress.MRdark-ops2026-09-29T16:23:00VerifiedMRdark-ops/ProofCMS-ProofCMS toolkit detects and validates vulnerabilities in Joomla and WordPress.MRdark-ops2026-09-29T16:23:00VerifiedPoC-in-GitHub · ZaleHack/joomla_rce_CVE-2015-8562All versions of the Joomla! below 3.4.6 are known to be vulnerable. But exploitation is possible with PHP versions below 5.5.29, 5.6.13 and below 5.5.★ 8ZaleHack2016-01-04CandidatePoC-in-GitHub · RobinHoutevelts/Joomla-CVE-2015-8562-PHP-POCA proof of concept for Joomla's CVE-2015-8562 vulnerability★ 2RobinHoutevelts2016-01-04CandidatePoC-in-GitHub · atcasanova/cve-2015-8562-exploitCVE-2015-8562 Exploit in bash★ 0atcasanova2016-02-08CandidatePoC-in-GitHub · thejackerz/scanner-exploit-joomla-CVE-2015-8562★ 0thejackerz2016-06-07CandidatePoC-in-GitHub · dmonst3r/CVE-2015-8562Joomla 1.5 - 3.4.5 Object Injection RCE X-Forwarded-For header★ 4dmonst3r2017-01-08CandidatePoC-in-GitHub · VoidSec/Joomla_CVE-2015-8562A proof of concept for Joomla's CVE-2015-8562 vulnerability (Object Injection RCE)★ 12VoidSec2017-09-17CandidatePoC-in-GitHub · xnorkl/Joomla_PayloadAdapted CVE-2015-8562 payload★ 0xnorkl2020-02-07CandidatePoC-in-GitHub · guanjivip/CVE-2015-8562没有编写完成，以后学习更多知识在回来完善★ 0guanjivip2020-07-25CandidatePoC-in-GitHub · lorenzodegiorgi/setup-cve-2015-8562Docker-compose to set up a test environment for exploiting CVE-2015-8562★ 0lorenzodegiorgi2021-05-03CandidatePoC-in-GitHub · Caihuar/Joomla-cve-2015-8562★ 1Caihuar2022-09-21CandidatePoC-in-GitHub · drolley919/joomla-cve-2015-8562-exploit-and-linux-forensic-analysis★ 0drolley9192026-06-22CandidateSource timeline
Discovered through Exploit-DBView source ↗
Record history
Record created from the first normalized source observation.
Metadata and source references refreshed.