Download the latest Joomla version to fix a serious SQL Injection vulnerability
If your website is based on the Joomla content management system make sure to update it to the latest version, which has just been released today.
The second most popular Joomla, CMS in the world has patched a serious vulnerability in its core components. Website administrators are recommended to install the latest version of Joomla 3.7.1 to patch a serious SQL Injection vulnerability (CVE-2017-8917) available on version 3.7.0.
"Filtering incomplete data requests has resulted in SQL Injection vulnerabilities" - Quote in Joomla 3.7.1 release notes.
The SQL Injection vulnerability in Joomla 3.7.0 was discovered and reported by Marc-Alexandre Montpas, a security specialist at Sucuri last week.
The Joomla Security Security Group (JSST) has not provided any technical details about the SQL Injection vulnerability, which proves the seriousness of the newly discovered security vulnerability, which can cause millions of pages The web is at risk of being attacked and ultimately affects users who visit those sites.
SQL Injection is easy to take advantage of, allowing hackers to remotely steal sensitive information from the database and gain unauthorized access to the site. Since hackers don't take long to figure out how to exploit this vulnerability, if you are using Joomla for your websites, you should download and inform others about this important patch release of Joomla. .
Link to download the latest Joomla version: https://downloads.joomla.org/ for you need!
You should read it
- 13 better security tips for Joomla CMS
- How to Build a Page Using JSN Pagebuilder
- Top 12 most dangerous backdoor in computer history
- Apple confirms the existence of a series of serious vulnerabilities that can cause iPhones to be hacked
- Learn about SQL Injection and how to prevent it
- Learn about patches
- How to Prevent SQL Injection in PHP
- WordPress plugins with more than 300,000 pages that use vulnerabilities are vulnerable to SQL Injection attacks
May be interested
- Web6: SQL Injection - Some Exploit Toolsin this section, the network administrator will introduce to you some tools (tools) used to exploit sql injection.
- Web4: SQL injection - Exploitation stepsweb4: sql injection - exploit steps. in this article, tipsmake.com will learn about sql injection exploitation steps.
- Specter V2 vulnerability re-appears to attack Intel, Arm CPUs, AMD chips are not affectedsecurity research team vusec and intel have just released a notice of a dangerous remote execution vulnerability of the specter class, known as branch history injection or bhi.
- Some basic points about the mechanism of attacking SQL Injection and DDoSin most of our users, many people have heard of the concept of attacking and hijacking websites with the method of sql injection - sqli and (distributed) denial of service - ddos.
- iOS 12.4 was unlocked after only a few weeks of launch by the mistake of Apple and an anonymous programmeron the evening of august 18 (vietnam time), the information of the latest ios version is now ios 12.4 has been jailbroken so that the jailbreak community can not stop being shocked.
- How to update iTunes to the latest versionevery time an itunes update is released, apple will add exciting new features, fix critical bugs, and further support iphone, ipad and other devices using itunes. therefore, you should update the new version as soon as possible. the itunes update process is quite simple. along tipsmake.com learn through the following article offline.
- How to Prevent SQL Injection in PHPthis wikihow teaches you how to prevent sql injection using prepared statements in php. sql injection is one of the most common vulnerabilities in web applications today. prepared statements use bound parameters and do not combine...
- Discuss IFrame Injection Attacksthe type of attack technique iframe injection is still the most basic and popular form of cross-site scripting - xss model .
- How to download the latest Office 2019 for free on PCalthough it has existed for a long time, office is still an office suite favored by many users, especially those who want to download office 2019 for free. the office 2019 version is optimized to ensure the best experience for users, with an extremely easy download and installation process, helping them work more efficiently.
- What is AI Prompt Injection attack?ai prompt injection attacks poison the output from the ai tools you rely on, changing and manipulating its output into something harmful.