Exploit for #VU6595 SQL injection in Joomla!

Vulnerability identifier: #VU6595

Vulnerability risk: High

CVSSv4.0: 6.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:A/U:Amber]

CVE-ID: CVE-2017-8917

CWE-ID: CWE-89

Exploitation vector: Network

Exploits in database: 7

• June 7, 2024
  • Joomblah (CVE-2017-8917 SQL injection Vulnerability in Joomla! 3.7.0 exploit) [Github]
• August 29, 2022
  • CVE-2017-8917 (Python exploit for CVE-2017-8917 - Joomla 3.7.0 'com_fields' SQL Injection) [Github]
• May 27, 2021
  • CVE-2017-8917 (Python exploit for CVE-2017-8917 - Joomla 3.7.0 'com_fields' SQL Injection) [Github]
• April 7, 2020
  • Exploits (Containing Self Made Perl Reproducers / PoC Codes) [Github]
• March 18, 2020
  • Exploit-Joomla (CVE-2017-8917 - SQL injection Vulnerability Exploit in Joomla 3.7.0 ) [Github]
  • Joomla 3.7.0 - 'com_fields' SQL Injection [Exploit-DB]
  • Joomla Component Fields SQLi Remote Code Execution [Metasploit]

Vulnerable software:
Joomla!
Web applications / CMS

Vendor: Joomla!