critical9.8
CVE-2018-17374
SQL Injection exists in the Auction Factory 4.5.5 component for Joomla!
Impact
SQL Injection exists in the Auction Factory 4.5.5 component for Joomla! via the filter_order_Dir or filter_order parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thephpfactory | Auction Factory | Version 4.5.5 |