CVE-2017-17871

Critical

Published: 27/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The 'JEXTN Question And Answer' extension version 3.1.0 for Joomla! has an SQL Injection vulnerability via the an parameter in a view=tags action or the ques-srch parameter.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database, threatening the integrity and confidentiality of the organization's data.

Recommendation

It is recommended to update the extension to the latest version that addresses this vulnerability and to review logs for potential attack attempts.

Original NVD description (English source)

The "JEXTN Question And Answer" extension 3.1.0 for Joomla! has SQL Injection via the an parameter in a view=tags action, or the ques-srch parameter.