Advisories

CVE-2020-10243

< Back to advisories

CVE ID – CVE-2020-10243

AFFECTED VENDORS – Joomla!

AFFECTED PRODUCTS – Joomla! CMS versions 1.7.0 – 3.9.15

VULNERABILITY DETAILS – The lack of type casting of a variable in SQL statement leads to a SQL injection vulnerability in the “Featured Articles” frontend menutype.

ADVICE – Update to version 3.9.16

DISCLOSURE TIMELINE:
09/03/2020 Disclosure to vendor
10/03/2020 Fix released

CREDIT – Sam Thomas 

Looking for more than just a test provider?

Get in touch with our team and find out how our tailored services can provide you with the information security confidence you need.

Contact us today >
Pentest-CREST-Accreditation
Pentest ISO 9001 Accreditation
Pentest ISO 27001 Accreditation
Pentest - Cyber Essentials Plus Accreditation
Pentest - OSCP Accreditation
Pentest-CRTO-Accreditation

/contact Us

/connect

X-twitter Linkedin-in Github Youtube

/services

/about

/links

Pentest Limited is registered in England and Wales with company number 11925182

Registered address: 22 Great James Street, London, WC1N 3ES

VAT registration No: 331802826​

© 2019 - Present. Pentest Limited. All rights reserved.

  • A Shearwater Group plc Company