Executive brief
A security vulnerability exists in the Myportfolio extension for the Joomla content management system, which is used to display project portfolios on websites. An unauthenticated attacker can exploit this flaw to gain unauthorized access to the website's database. This could lead to the theft of sensitive information, including user credentials or private site data, potentially compromising the entire web server.
Technical details
An SQL injection vulnerability (CWE-89) exists in the Myportfolio component version 3.0.2 for Joomla. The flaw is located in the 'task=project&view=grid' endpoint within index.php, where the 'pid' parameter is not properly sanitized before being used in a database query. A remote, unauthenticated attacker can exploit this by sending a specially crafted GET request to extract sensitive information from the database. The vulnerability was publicly disclosed with proof-of-concept exploit code available on Exploit-DB. No official patch is mentioned in the advisory, suggesting users should exercise caution or seek alternative extensions.
Affected products
- Joomla Component Myportfolio Myportfolio 3.0.2
Timeline
- 2017-04-24: disclosed: Original exploit published on Exploit-DB
- 2026-06-19: advisory: NVD and VulnCheck published formal advisory details