CVE-2017-7628 The "Smart related articles" extension 1.1 for Joomla! has SQL injection in dialog.php (attacker must use search_cats variable in POST method to exploit this vulnerability).
CriticalCVSS 9.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The "Smart related articles" extension 1.1 for Joomla! has SQL injection in dialog.php (attacker must use search_cats variable in POST method to exploit this vulnerability).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| smart related articles project smart related articles | = 1.1 | No fix listed |
References
- extensions.joomla.org not-applicable
- gist.github.com issue-tracking patch third-party-advisory
- vel.joomla.org third-party-advisory