Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
8.8

Joomla! PHP-Bridge SQL Injection Risk: Unauthenticated Database Access

CVE-2017-20275 · published 4 months ago
Summary

Joomla! PHP-Bridge is vulnerable to SQL injection attacks. This means that hackers can access sensitive information in your database without needing a password. To protect your site, update Joomla! PHP-Bridge to a secure version or remove it if possible.

Original advisory text
Joomla! Component PHP-Bridge 1.2.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id paramete...
Joomla! Component PHP-Bridge 1.2.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the id parameter. Attackers can send GET requests to index.php with option=com_phpbridge&view=phpview parameters and inject SQL code in the id parameter to extract database information including table and column names.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
8.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-89SQL Injection
Timeline
Published19 Jun 2026
Updated4 Nov 2026
First seen19 Jun 2026
Sources
CVE-2017-20275 · NVD
Track software like this
Free during beta