CVE-2017-17870

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Joomla! Component JBuildozer 1.4.1 - 'appid' SQL Injection2017-12-12 · webapps · php · Verified

Impact

The JBuildozer extension 1.4.1 for Joomla! has SQL Injection via the appid parameter in an entriessearch action.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://vel.joomla.org/vel-blog/2046-jbuildozer-1-4-1-sql-injection
• https://www.exploit-db.com/exploits/43323/
• https://vel.joomla.org/vel-blog/2046-jbuildozer-1-4-1-sql-injection
• https://www.exploit-db.com/exploits/43323/