CVE-2017-20278

Name of the Vulnerable Software and Affected Versions JoomRecipe version 1.0.3

Description An SQL injection allows unauthenticated attackers to manipulate database queries by injecting SQL code through the category parameter. This is achieved by sending GET requests to the 'all-recipes' endpoint with malicious SQL payloads in the category path segment to extract sensitive database information. SQL injection is a type of flaw that allows an attacker to interfere with the queries that an application makes to its database.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.