CVE-2017-8917

CWE-89 — SQL Injection7 documents6 sources
9.8
CVSS
CRITICAL
EPSS94.5%(100th)
Public Exploit
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

▶NVDjoomla/joomla\!3.7.0
SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspecified vectors.
NVD ↗MITRE ↗Patch: developer.joomla.org ↗Patch: developer.joomla.org ↗

🔴Vulnerability Details

2
GHSA
GHSA-p7mw-99mc-9597: SQL injection vulnerability in Joomla! 3↗2022-05-14
▶
CVEList
CVE-2017-8917: SQL injection vulnerability in Joomla! 3↗2017-05-17
▶

💥Exploits & PoCs

3
Exploit-DB
Joomla! Component Fields - SQLi Remote Code Execution (Metasploit)↗2018-03-29
▶
Exploit-DB
Joomla! 3.7.0 - 'com_fields' SQL Injection↗2017-05-19
▶
Nuclei
Joomla! <3.7.1 - SQL Injection
▶

🔍Detection Rules

1
Suricata
ET WEB_SPECIFIC_APPS Joomla 3.7.0 - Sql Injection (CVE-2017-8917)↗2017-06-01
▶