SQL Injection Vulnerability in Joomla! 3.7

by CIRT Team

Description: SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspecified vectors. The vulnerability is caused by a new component, com_fields, which was introduced in version 3.7.

Impact: An SQL injection flaw that allows attackers to execute custom SQL code on affected systems and take over vulnerable sites.

Mitigation: Upgrade to version 3.7.1. Please check specific vendor advisory for more information.

Reference URL’s:

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8917
• https://www.joomla.org/announcements/release-news/5705-joomla-3-7-1-release.html
• https://blog.sucuri.net/2017/05/sql-injection-vulnerability-joomla-3-7.html

CIRT Team

Recommended Posts

Active Exploitation of Critical F5 BIG – IP Vulnerability (CVE–2023-46747) Uncovered in Bangladesh

06 Nov 2024 - Security Advisories & Alerts

Emerging Threat_Stealer Malware (Lumma C2) Campaign with fake CAPTCHA pages

08 Oct 2024 - Security Advisories & Alerts

Detection of Fog Ransomware Footprint in Cyber Space of Bangladesh

12 Sep 2024 - Security Advisories & Alerts