critical9.8Public exploit code
CVE-2018-17376
SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Component Reverse Auction Factory 4.3.8 - SQL Injection2018-09-25 · webapps · php · Verified
Impact
SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filter_order_Dir, cat, or filter_letter parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thephpfactory | Reverse Auction Factory | Version 4.3.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/149531/Joomla-Reverse-Auction-Factory-4.3.8-SQL-Injection.html
- https://www.exploit-db.com/exploits/45475/
- http://packetstormsecurity.com/files/149531/Joomla-Reverse-Auction-Factory-4.3.8-SQL-Injection.html
- https://www.exploit-db.com/exploits/45475/