CVE-2017-8917
62Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 100%
from disclosure to weapon2 days
Published on NVDMay 17
1st PoC+2d
metasploitMay 17
exploitation probability
100%top 1% of all CVEs
observed exploitation
nono source reports it
15 public exploit(s)
SQL injection vulnerability in Joomla! 3.7.x before 3.7.1 allows attackers to execute arbitrary SQL commands via unspecified vectors.
Affected products
n/a · n/apublic PoCs found — 15✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/44358exploitdbwww.exploit-db.com/exploits/42033unverifiedgithubgithub.com/stefanlucas/Exploit-Joomla★ 67githubgithub.com/brianwrf/Joomla3.7-SQLi-CVE-2017-8917★ 7githubgithub.com/ztrxwzy/joomla.3.7.0exploit★ 2githubgithub.com/AkuCyberSec/CVE-2017-8917-Joomla-370-SQL-Injection★ 2githubgithub.com/BaptisteContreras/CVE-2017-8917-Joomla★ 2githubgithub.com/gmohlamo/CVE-2017-8917★ 0githubgithub.com/cved-sources/cve-2017-8917★ 0githubgithub.com/Siopy/CVE-2017-8917★ 0githubgithub.com/ionutbaltariu/joomla_CVE-2017-8917★ 0githubgithub.com/gloliveira1701/Joomblah★ 0githubgithub.com/yayateayayatea/cve-2017-8917★ 0cve_referencewww.exploit-db.com/exploits/42033/unverifiedcve_referencewww.exploit-db.com/exploits/44358/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.