CVE-2017-20263: Joomla! FocalPoint Pro Free 1.2.3 SQL Injection via location
Joomla! Component FocalPoint Pro/Free 1.2.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to index.php with option=comfocalpoint, view=location, and a crafted id parameter containing SQL commands to extract sensitive database information.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Joomla! Component FocalPoint Pro/Free 1.2.3from your environment.Uninstall the FocalPoint (com_focalpoint) component from the Joomla installation if it is not required.
- Configuration
Disable the FocalPoint component in the Joomla administrator interface to prevent access to the vulnerable endpoint (index.php?option=com_focalpoint&view=location).
Joomla component com_focalpoint enabled = false - Compensating control
Deploy a WAF or firewall rule to block or filter HTTP requests that include 'option=com_focalpoint' and 'view=location' (and/or requests with suspicious 'id' parameter payloads) to prevent exploitation via index.php.
- Operational
Search web and database logs for GET requests to index.php with 'option=com_focalpoint' and 'view=location' and any malicious 'id' parameter activity. Assume possible database exposure; investigate for unauthorized data access and, if compromise is suspected, rotate database credentials and remediate any discovered compromises.
Event History
Frequently Asked Questions
What is the severity of CVE-2017-20263?
CVE-2017-20263 has a high severity rating of 8.2.
How do I fix CVE-2017-20263?
To fix CVE-2017-20263, you should upgrade to FocalPoint Pro/Free version 1.2.4 or later, which addresses the SQL injection vulnerability.
What type of vulnerability is CVE-2017-20263?
CVE-2017-20263 is classified as an SQL injection vulnerability.
Who can exploit CVE-2017-20263?
CVE-2017-20263 can be exploited by unauthenticated attackers.
What impact does CVE-2017-20263 have on Joomla! sites?
CVE-2017-20263 allows attackers to execute arbitrary SQL queries, potentially compromising sensitive data.