NetSight
critical9.8

CVE-2018-17386

SQL Injection exists in the Micro Deal Factory 2.4.0 component for Joomla!

Impact

SQL Injection exists in the Micro Deal Factory 2.4.0 component for Joomla! via the id parameter, or the PATH_INFO to mydeals/ or listdeals/.

Affected products

VendorProductAffected versions
ThephpfactoryMicro Deal Factory
Version 2.4.0

Weakness classification

References