critical9.8
CVE-2018-17381
SQL Injection exists in the Dutch Auction Factory 2.0.2 component for Joomla!
Impact
SQL Injection exists in the Dutch Auction Factory 2.0.2 component for Joomla! via the filter_order_Dir or filter_order parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thephpfactory | Dutch Auction Factory | Version 2.0.2 |