CyberSec.Space Logo
Back to CVE Browser

CVE-2018-17374

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.1640%
EPSS Percentile12.00th
PublishedJun 19, 2019
Last ModifiedNov 21, 2024

Vulnerability Description

SQL Injection exists in the Auction Factory 4.5.5 component for Joomla! via the filter_order_Dir or filter_order parameter.

Affected Platforms (CPE)

📦
Thephpfactory

Auction Factory

= 4.5.5

References & Advisories

🔗 https://www.exploit-db.com/author/?a=8844
🔗 https://www.exploit-db.com/exploits/45456
🔗 https://www.exploit-db.com/author/?a=8844
🔗 https://www.exploit-db.com/exploits/45456

Related Vulnerabilities

CVE-2018-173769.8

SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filter_order_Dir, cat, or filter_letter pa...

CVE-2018-173789.8

SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filter_order_Dir or filter_order parameter.

CVE-2018-173819.8

SQL Injection exists in the Dutch Auction Factory 2.0.2 component for Joomla! via the filter_order_Dir or filter_order parameter.

CVE-2018-261110.0

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Core Service...