PT-2026-50958 · Undefined · Undefined

Published 2026-06-19 · Updated 2026-06-19 · CVE-2017-20277

NVD

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Joomla JoomRecipe 1.0.4 component contains a blind SQL injection vulnerability in the search author parameter on the search results page. Attackers can inject SQL code through POST requests to the search endpoint to extract database information using boolean-based blind SQL injection techniques.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2017-20277

Affected Products

Undefined

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2017-20277 · Security Note
• http://joomboost.com · Note
• https://exploit-db.com/exploits/42347 · Note
• https://extensions.joomla.org/extensions/extension/vertical-markets/food-a-beverage/joomrecipe · Note
• https://vulncheck.com/advisories/joomla-joomrecipe-component-blind-sql-injection-via-search-author · Note