critical9.8Public exploit code
CVE-2017-15965
The NS Download Shop (aka com_ns_downloadshop) component 2.2.6 for Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Component NS Download Shop 2.2.6 - 'id' SQL Injection2017-10-30 · webapps · php
Impact
The NS Download Shop (aka com_ns_downloadshop) component 2.2.6 for Joomla! allows SQL Injection via the id parameter in an invoice.create action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nswd | Ns Download Shop | Version 2.2.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/101624
- https://packetstormsecurity.com/files/144435/Joomla-NS-Download-Shop-2.2.6-SQL-Injection.html
- https://www.exploit-db.com/exploits/43094/
- http://www.securityfocus.com/bid/101624
- https://packetstormsecurity.com/files/144435/Joomla-NS-Download-Shop-2.2.6-SQL-Injection.html
- https://www.exploit-db.com/exploits/43094/