CVE-2017-15946

Critical

Published: 28/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In the com_tag component 1.7.6 for Joomla!, a SQL injection vulnerability is located in the `tag` parameter to index.php. The request method to execute is GET.

Risk Assessment

This vulnerability may allow attackers to access the database, potentially leading to the disclosure of sensitive information or data manipulation.

Recommendation

It is recommended to update the com_tag component to the latest version and implement input data filtering to minimize the risk of SQL injection.

Original NVD description (English source)

In the com_tag component 1.7.6 for Joomla!, a SQL injection vulnerability is located in the `tag` parameter to index.php. The request method to execute is GET.