critical9.8Public exploit code
CVE-2018-14592
The CWJoomla CW Article Attachments PRO extension before 2.0.7 and CW Article Attachments FREE extension before 1.0.6 for Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Component CW Article Attachments 1.0.6 - 'id' SQL Injection2018-09-24 · webapps · php
Impact
The CWJoomla CW Article Attachments PRO extension before 2.0.7 and CW Article Attachments FREE extension before 1.0.6 for Joomla! allow SQL Injection within download.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cwjoomla | Cw Article Attachments Free | before 1.0.6 |
| Cwjoomla | Cw Article Attachments Pro | before 2.0.7 |