NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

VulnerabilityPoC ×22

CVE-2017-8917

CVSS 3.0: 9.8 critical
EPSS: 100%p100
Published: May 17, 2017 · May 17, 2017
Modified: Jun 17, 2026

Analyze CVE-2017-8917 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspecified vectors.

Vendors: joomla

Products: joomla\!

Ecosystems: Joomla

Weakness: CWE-89

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (99.8%)

In the news

3 stories

Latest Joomla 3.7.1 Release Patches Critical SQL Injection Attack

The Hacker NewsMay 18, 07:41 UTC · May 18, 2017VulnerabilityCVE-2017-89171

60

Critical SQL Injection CVE-2017-8917 vulnerability patched in Joomla, update it now!

Security AffairsMay 18, 07:39 UTC · May 18, 2017VulnerabilityCVE-2017-8917 CVE-2016-8870 CVE-2016-88692

60

Joomla users: Update immediately to kill severe SQLi vulnerability

Help Net SecurityOct 15, 09:22 UTC · Oct 15, 2018VulnerabilityCVE-2017-89172

35