CVE-2017-20273: Joomla Event Registration Pro Calendar 4.1.3 SQL Injection
Joomla Event Registration Pro Calendar 4.1.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to index.php with option=comregistrationpro&view=category&id parameter containing SQL injection payloads to extract sensitive database information.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Joomla Event Registration Pro Calendar (com_registrationpro)from your environment.Uninstall or disable the Event Registration Pro Calendar component from the Joomla site if it is not required. This removes the vulnerable code path handling the id parameter.
- Compensating control
Deploy WAF or webserver rules to block or sanitize requests to index.php with option=com_registrationpro&view=category (particularly requests including an id parameter). Restrict access to the component’s endpoints to trusted IPs or internal networks where practical.
- Operational
Search web and application logs for suspicious GET requests to index.php with option=com_registrationpro&view=category&id and investigate for potential data exfiltration. If compromise is suspected, rotate database credentials, review and restore affected data from known-good backups, and apply incident response procedures.
Event History
Frequently Asked Questions
What is the severity of CVE-2017-20273?
The severity of CVE-2017-20273 is rated high with a score of 8.8.
How do I fix CVE-2017-20273?
To fix CVE-2017-20273, update the Joomla Event Registration Pro Calendar to the latest version that addresses SQL injection vulnerabilities.
What type of vulnerability is CVE-2017-20273?
CVE-2017-20273 is an SQL injection vulnerability that allows the execution of arbitrary SQL queries.
Who can exploit CVE-2017-20273?
CVE-2017-20273 can be exploited by unauthenticated attackers due to its design.
What is affected by CVE-2017-20273?
CVE-2017-20273 affects Joomla Event Registration Pro Calendar versions prior to the patch that resolves the SQL injection issue.