CVE-2017-8917

PoC ×2—

CVSS 3.0

9.8 critical

EPSS

100%p100

Published

May 17, 2017 (May 17, 2017)

Modified

Jun 17, 2026

Description

SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspecified vectors.

Vendors: joomla
Products: joomla\!
Ecosystems: Joomla
Weakness: CWE-89
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (99.8%)

In the news3 stories

Latest Joomla 3.7.1 Release Patches Critical SQL Injection Attack

The Hacker NewsMay 18, 07:41 UTC · May 18, 2017Vulnerability CVE-2017-8917

60

Critical SQL Injection CVE-2017-8917 vulnerability patched in Joomla, update it now!

Security AffairsMay 18, 07:39 UTC · May 18, 2017Vulnerability CVE-2017-8917 CVE-2016-8870 CVE-2016-8869

60

Joomla users: Update immediately to kill severe SQLi vulnerability

Help Net SecurityOct 15, 09:22 UTC · Oct 15, 2018Vulnerability CVE-2017-8917

35