CVE-2017-20254: Joomla! Component User Bench 1.0 SQL Injection via userid
Joomla! Component User Bench 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the userid parameter. Attackers can send GET requests to index.php with the option=comuserbench&view=detail&userid parameter containing SQL injection payloads to extract sensitive database information including credentials and configuration data.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-20254?
CVE-2017-20254 has a severity rating of high with a score of 8.2.
How do I fix CVE-2017-20254?
To fix CVE-2017-20254, update to the latest version of the Joomla! Component User Bench or apply the appropriate security patches.
What kind of vulnerability is CVE-2017-20254?
CVE-2017-20254 is an SQL injection vulnerability that allows attackers to execute arbitrary SQL queries.
Who is affected by CVE-2017-20254?
Unauthenticated attackers can exploit CVE-2017-20254, affecting users of Joomla! Component User Bench 1.0.
What can attackers do with CVE-2017-20254?
Attackers can execute arbitrary SQL queries by injecting malicious code through the userid parameter in GET requests.