Skip to content

CVE-2017-8917 SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspecified vectors.

CriticalCVSS 9.8 EPSS 99.8% Framework module Public exploit
Published
Updated
Exploit status
Public exploit available

Description

SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

ProductAffected versionsFixed in
joomla = 3.7.0 No fix listed

References

  • 98515 third-party-advisory vdb-entry
  • 1038522 third-party-advisory vdb-entry
  • developer.joomla.org patch vendor-advisory
  • 42033 exploit third-party-advisory vdb-entry
  • 44358 exploit third-party-advisory vdb-entry