CVE-2018-17379

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Joomla! Component Raffle Factory 3.5.2 - SQL Injection2018-09-25 · webapps · php · Verified

Impact

SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filter_order_Dir or filter_order parameter.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://packetstormsecurity.com/files/149520/Joomla-Raffle-Factory-3.5.2-SQL-Injection.html
• https://www.exploit-db.com/exploits/45464/
• http://packetstormsecurity.com/files/149520/Joomla-Raffle-Factory-3.5.2-SQL-Injection.html
• https://www.exploit-db.com/exploits/45464/