Extra Search
Approved changes feed: RSS · Atom
cpe:2.3:a:joomlaboat:extra_search:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Joomlaboat (af970a1f-c078-599b-b7ec-5f801f2a1fa8) |
|---|---|
| Product | Extra Search (3e1e552f-c17d-50a7-a82d-1c45b7845687) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2017-20281 |
vulnerable | 2026-07-28 18:56:21.471240 |
Joomla! Component Extra Search 2.2.8 SQL Injection
HIGH (8.2)
Joomla! Component Extra Search 2.2.8 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the establename parameter. Attackers can send GET requests to index.php with the option=com_extrasearch parameter and malicious SQL in the establename field to extract sensitive database information.
Published: 2026-06-19T16:54:56.105Z
Updated: 2026-10-01T15:19:07.874Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.