Skip to content
Threat Feed
Subscribe

Product

FocalPoint Pro/Free (1.2.3)

1 brief RSS
high advisory

Joomla! FocalPoint Pro/Free SQL Injection (CVE-2017-20263)

An unauthenticated SQL injection vulnerability (CVE-2017-20263) in Joomla! Component FocalPoint Pro/Free version 1.2.3 allows attackers to execute arbitrary SQL queries via a crafted 'id' parameter in GET requests, leading to sensitive database information disclosure.

FocalPoint Pro/Free sqli web-vulnerability joomla data-exfiltration
1r 3t 1c