CVE-2017-20277 — Joomla JoomRecipe 1.0.4 Component Blind SQL Injection via search_author
Joomla JoomRecipe 1.0.4 component contains a blind SQL injection vulnerability in the search_author parameter on the search results page. Attackers can inject SQL code through P…
Published: 2026-06-19 · CVSS: 8.8 · CVSS 4.0
Joomla JoomRecipe 1.0.4 component contains a blind SQL injection vulnerability in the search_author parameter on the search results page. Attackers can inject SQL code through POST requests to the search endpoint to extract database information using boolean-based blind SQL injection techniques.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7