In Joomla! before 3.8.4, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the Hathor postinstall me...

参照URL

• advisory securityfocus.com
• advisory securitytracker.com
• advisory developer.joomla.org