CVE-2017-20266: Joomla SP Movie Database 1.3 SQL Injection via searchword
Joomla SP Movie Database 1.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the searchword parameter. Attackers can send GET requests to the searchresults view with crafted SQL payloads in the searchword parameter to extract sensitive database information.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Joomla SP Movie Database 1.3from your environment.Uninstall the SP Movie Database extension if it is not required to eliminate the vulnerable code (the searchresults view that accepts the searchword parameter).
- Configuration
Disable the public search functionality or require authentication for access to the searchresults view to prevent unauthenticated requests from supplying a searchword parameter.
SP Movie Database (searchresults view) public_search_enabled = false - Compensating control
Deploy WAF rules or web-server/filtering rules to block or sanitize requests targeting the searchresults view or the searchword parameter; alternatively restrict access to the searchresults endpoint to trusted IPs or authenticated users.
- Operational
Audit web and database logs for signs of exploitation (suspicious SQL in searchword requests) and, if sensitive data access is suspected, perform incident response actions such as credential rotation and further forensic investigation.
Event History
Frequently Asked Questions
What is the severity of CVE-2017-20266?
The severity of CVE-2017-20266 is rated as high with a score of 8.2.
How does CVE-2017-20266 affect Joomla SP Movie Database?
CVE-2017-20266 allows unauthenticated attackers to execute arbitrary SQL queries via the searchword parameter.
How can I fix CVE-2017-20266 in Joomla SP Movie Database?
To fix CVE-2017-20266, ensure that you update to the latest version of Joomla SP Movie Database that addresses the SQL injection vulnerability.
What kind of attacks can be performed using CVE-2017-20266?
Attackers can exploit CVE-2017-20266 by injecting malicious SQL queries through crafted GET requests to the searchresults view.
Is authentication required to exploit CVE-2017-20266?
No, CVE-2017-20266 can be exploited by unauthenticated users, making it particularly dangerous.