Site on joomla 3.3.1 is it subject to sql injection?

Question

Joomla

There is a university website that needs to be checked for security against hacking))
They write on the Internet that this version has vulnerabilities, but I tried with sqlmap - it didn’t work out.
Has anyone dealt with this?
There is also a problem with the brute force of the Joomla admin panel, I tried the hydra but also does not want to brute))

Answer 1

Are you serious? 3.3.1? Apparently you haven't checked everything. Start here and work your way up to more recent vulnerabilities:
https://developer.joomla.org/security-centre.html?...

Answer 2

There are fixed vulnerabilities that affect joomla 3.3.1 (or its modules).
The fact that you did not manage to use them (for any purpose) is a matter of a specific installation and your qualifications.