CVE-2017-20274: Joomla LMS King Professional 3.2.4.0 SQL Injection via learningpath
Joomla LMS King Professional 3.2.4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cpid parameter. Attackers can send GET requests to index.php with the option=comlmsking, view=lmsking, layout=learningpath, and task=learningPath parameters to extract sensitive database information.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Joomla LMS King Professional 3.2.4.0from your environment.Uninstall the Joomla LMS King Professional (com_lmsking) component from the site if it is not required.
- Configuration
If the LMS King Professional component is not required, disable/unpublish the com_lmsking component in the Joomla administrator interface to prevent access to its endpoints (index.php?option=com_lmsking...).
Joomla LMS King Professional (com_lmsking) enabled = false - Compensating control
Deploy a web application firewall or webserver rule to block or rate-limit requests that target index.php with parameters option=com_lmsking, view=lmsking, layout=learningpath, task=learningPath or that include the cp_id parameter in query strings.
- Operational
Review webserver and application logs for requests matching index.php?option=com_lmsking&view=lmsking&layout=learningpath&task=learningPath or use of the cp_id parameter; if exploitation is suspected, investigate for data exfiltration and rotate any database credentials or other secrets that may have been exposed.
Event History
Frequently Asked Questions
What is the severity of CVE-2017-20274?
The severity of CVE-2017-20274 is rated high with a score of 8.8.
How do I fix CVE-2017-20274?
To mitigate CVE-2017-20274, update Joomla LMS King Professional to the latest version that addresses the SQL injection vulnerability.
What is the impact of CVE-2017-20274?
CVE-2017-20274 allows unauthenticated attackers to execute arbitrary SQL queries, potentially compromising sensitive data.
Which software is affected by CVE-2017-20274?
CVE-2017-20274 affects Joomla LMS King Professional version 3.2.4.0.
How does CVE-2017-20274 exploit SQL injection?
CVE-2017-20274 exploits SQL injection through the cp_id parameter in GET requests to manipulate database queries.