CVE-2017-17870

Critical

Published: 27/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The JBuildozer extension version 1.4.1 for Joomla! has a SQL Injection vulnerability via the appid parameter in an entriessearch action.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, threatening the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update the JBuildozer extension to the latest version to mitigate this vulnerability and review logs for potential attacks.

Original NVD description (English source)

The JBuildozer extension 1.4.1 for Joomla! has SQL Injection via the appid parameter in an entriessearch action.