The "Smart related articles" extension 1.1 for Joomla! has SQL injection in dialog.php attacker must use searchcats variable in POST method to exploit this vulnerability...
9.8CVSS9.8AI score0.01235EPSS
SaveExploits0References3
Cvelist•added 2017/04/13 3:20 a.m.•23 views
CVE-2017-7627
The "Smart related articles" extension 1.1 for Joomla! does not prevent direct requests to dialog.php there is a missing JEXEC check...
