An issue was discovered in Joomla! before 3.9.16. The lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the Featured Articles frontend menutype.
We have discovered 84,076 live websites that are affected by CVE-2020-10243.
| Product | |
| Category | Content Management System |
| Vulnerable Domains | 84,076 live websites (96% of Joomla install base) |
| Vulnerable Versions |
|
| Vulnerable Versions Count | 79 versions ( 60% of all versions) |
| 5,792 websites | |
| 18,326 websites | |
| 12,814 websites | |
| 6,264 websites | |
| 3,546 websites | |
| 2,928 websites | |
| 2,791 websites | |
| 2,096 websites | |
| 2,034 websites | |
| 2,031 websites |
| .com | 19,011 websites |
| .it | 12,181 websites |
| .ru | 10,524 websites |
| .de | 3,485 websites |
| .org | 2,315 websites |
| .nl | 2,174 websites |
| .co.uk | 1,768 websites |
| .net | 1,745 websites |
| .se | 1,605 websites |
| .cz | 1,548 websites |
| Domain | Country | Rank | Contacts |
|---|---|---|---|
| *****************.de | *,*** | ||
| *****.com | **,*** | ||
| ***********.**.za | **,*** | ||
| ***************.com | **,*** | ||
| *********.kz | **,*** | ||
| *********.com | **,*** | ||
| ************.com | **,*** | ||
| ************.com | **,*** | ||
| *********************.com | **,*** | ||
| *********.se | **,*** |