CVE-2017-17875

Critical

Published: 27/12/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The JEXTN FAQ Pro extension version 4.0.0 for Joomla! has a SQL Injection vulnerability via the id parameter in a view=category action.

Risk Assessment

An attacker could exploit this vulnerability to execute unauthorized queries against the database, potentially leading to the disclosure of sensitive data or system compromise.

Recommendation

It is recommended to update the JEXTN FAQ Pro extension to the latest version to mitigate this vulnerability and to monitor logs for potential attack attempts.

Original NVD description (English source)

The JEXTN FAQ Pro extension 4.0.0 for Joomla! has SQL Injection via the id parameter in a view=category action.