漏洞描述
Joomla! before 3.7.1 contains a SQL injection vulnerability. An attacker can possibly obtain sensitive information from a database, modify data, and execute unauthorized administrative operations in the context of the affected site.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
developer.joomla.orghttps://developer.joomla.org/security-centre/692-20170501-core-sql-injection.html↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2017-8917↗web.archive.orghttps://web.archive.org/web/20211207050608/http://www.securitytracker.com/id/1038522↗www.securitytracker.comhttp://www.securitytracker.com/id/1038522↗github.comhttps://github.com/binfed/cms-exp↗