CVE-2017-20277
HIGHJoomla JoomRecipe 1.0.4 Component Blind SQL Injection via search_author
Title source: cnaExploitation Summary
EIP tracks 1 public exploit for CVE-2017-20277. PoCs published by Teng.
AI-analyzed exploit summary This exploit demonstrates a blind SQL injection vulnerability in the Joomla JoomRecipe 1.0.4 component via the 'search_author' POST parameter. It includes a sqlmap command to exploit the vulnerability, confirming its functionality.
Description
Joomla JoomRecipe 1.0.4 component contains a blind SQL injection vulnerability in the search_author parameter on the search results page. Attackers can inject SQL code through POST requests to the search endpoint to extract database information using boolean-based blind SQL injection techniques.
Exploits (1)
This exploit demonstrates a blind SQL injection vulnerability in the Joomla JoomRecipe 1.0.4 component via the 'search_author' POST parameter. It includes a sqlmap command to exploit the vulnerability, confirming its functionality.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N