critical9.8Public exploit code
CVE-2017-17875
The JEXTN FAQ Pro extension 4.0.0 for Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Component JEXTN FAQ Pro 4.0.0 - 'id' SQL Injection2017-12-26 · webapps · php
Impact
The JEXTN FAQ Pro extension 4.0.0 for Joomla! has SQL Injection via the id parameter in a view=category action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jextn | Jextn Faq Pro | Version 4.0.0 |