PT-2026-50958 · Undefined · Undefined

Publicado 2026-06-19 · Atualizado 2026-06-19 · CVE-2017-20277

NVD

CVSS v3.1

8.2

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Joomla JoomRecipe 1.0.4 component contains a blind SQL injection vulnerability in the search author parameter on the search results page. Attackers can inject SQL code through POST requests to the search endpoint to extract database information using boolean-based blind SQL injection techniques.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2017-20277

Produtos afetados

Undefined

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-20277 · Nota de Segurança
• http://joomboost.com · Nota
• https://exploit-db.com/exploits/42347 · Nota
• https://extensions.joomla.org/extensions/extension/vertical-markets/food-a-beverage/joomrecipe · Nota
• https://vulncheck.com/advisories/joomla-joomrecipe-component-blind-sql-injection-via-search-author · Nota