Vulnerabilitycritical

Critical SQL Injection CVE-2017-8917 vulnerability patched in Joomla, update it now!

Security Affairsby @securityaffairsMay 18, 2017 · 07:39 UTC (May 18, 2017)2 min read2

Read at securityaffairs.com

Analyze CVE-2017-8917 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2017-8917 CVE-2016-8870 CVE-2016-8869

Tags: cve-2017-8917 cve-2016-8870 cve-2016-8869 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2016-8869 +1 related CVE CVE-2016-8870	The register method in the UsersModelRegistration class in controllers/user.php in the Users component in Joomla! before 3.6.4 allows remote attackers to gain…	9.8 group max	97%	PoC ×2	Nov 4, 2016
CVE-2017-8917	SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspecified vectors	9.8	100%	PoC ×2	May 17, 2017

From the original article

2 min read at securityaffairs.com

Joomla maintainers released a fix for a critical SQL injection flaw, tracked as CVE-2017-8917, that can be exploited by a remote attacker to hijack websites On Wednesday Joomla maintainers released a fix for a critical SQL injection vulnerability, tracked as CVE-2017-8917 , that can be easily exploited by a remote attacker to obtain sensitive data and hijack websites.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.