critical9.8
CVE-2018-17386
SQL Injection exists in the Micro Deal Factory 2.4.0 component for Joomla!
Impact
SQL Injection exists in the Micro Deal Factory 2.4.0 component for Joomla! via the id parameter, or the PATH_INFO to mydeals/ or listdeals/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thephpfactory | Micro Deal Factory | Version 2.4.0 |