BIT-joomla-2020-10243

vendorUSosv

view advisory published 2025-04-03Licence: per source

An issue was discovered in Joomla! before 3.9.16. The lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the Featured Articles frontend menutype.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2020-10243US	critical9.8	1.84% (79th)	—	2020-03-16
An issue was discovered in Joomla! before 3.9.16. The lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the Featured Articles frontend…

references

External citations — patches, advisories, analysis.

https://developer.joomla.org/security-centre/807-20200306-core-sql-injection-in-featured-articles-menu-parametersADVISORY
https://nvd.nist.gov/vuln/detail/CVE-2020-10243WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan