CVE-2017-20267
HIGHJoomla! Component Calendar Planner 1.0.1 SQL Injection
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2017-20267. PoCs published by Ihsan Sencan.
AI-analyzed exploit summary The exploit demonstrates a SQL injection vulnerability in Joomla! Component Calendar Planner 1.0.1 by injecting malicious SQL commands via the 'category_id' parameter in the URL. The PoC provides a clear example of how an attacker can exploit this vulnerability to manipulate the database queries.
Description
Joomla! Component Calendar Planner 1.0.1 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the category_id parameter. Attackers can send GET requests to the events view with malicious SQL code in the category_id parameter to extract sensitive database information.
Exploits (1)
The exploit demonstrates a SQL injection vulnerability in Joomla! Component Calendar Planner 1.0.1 by injecting malicious SQL commands via the 'category_id' parameter in the URL. The PoC provides a clear example of how an attacker can exploit this vulnerability to manipulate the database queries.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N