CVE-2017-7628

Critical

Published: 13/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The 'Smart related articles' extension version 1.1 for Joomla! has an SQL injection vulnerability in dialog.php. An attacker must use the search_cats variable in the POST method to exploit this vulnerability.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized access to the database and exposure of sensitive information. Organizations should be aware of the risks associated with potential data leaks.

Recommendation

It is recommended to update the 'Smart related articles' extension to the latest version to mitigate this vulnerability. Additionally, monitoring server logs for potential attack attempts is advisable.

Original NVD description (English source)

The "Smart related articles" extension 1.1 for Joomla! has SQL injection in dialog.php (attacker must use search_cats variable in POST method to exploit this vulnerability).