Vulnerabilities

TI-2017-05264 CVE-2017-7628 · GHSA-5r98-9qpj-r8f5

The "Smart related articles" extension 1.1 for Joomla! has SQL injection in dialog.php…

MEDIUM 45

The "Smart related articles" extension 1.1 for Joomla! has SQL injection in dialog.php (attacker must use search_cats variable in POST method to exploit this vulnerability).

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01235 Published 2017-04-13 No fix listed CWE-89

TI-2017-05263 CVE-2017-7627 · GHSA-6jrc-f5fc-49v4

The "Smart related articles" extension 1.1 for Joomla! does not prevent direct requests…

LOW 25

The "Smart related articles" extension 1.1 for Joomla! does not prevent direct requests to dialog.php (there is a missing _JEXEC check).

CVSS 3.0MEDIUM 5.3 Network No auth No interaction EPSS 0.0072 Published 2017-04-13 No fix listed

TI-2017-05262 CVE-2017-7626 · GHSA-ghgh-rh77-4r3j

The "Smart related articles" extension 1.1 for Joomla! has XSS in dialog.php (n_art,type in GET Method).

LOW 29

The "Smart related articles" extension 1.1 for Joomla! has XSS in dialog.php (n_art,type in GET Method).

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00855 Published 2017-04-13 No fix listed CWE-79

Vulnerabilities

Filters

The "Smart related articles" extension 1.1 for Joomla! has SQL injection in dialog.php…

The "Smart related articles" extension 1.1 for Joomla! does not prevent direct requests…

The "Smart related articles" extension 1.1 for Joomla! has XSS in dialog.php (n_art,type in GET Method).