critical9.8Public exploit code
CVE-2018-5987
SQL Injection exists in the Pinterest Clone Social Pinboard 2.0 component for Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Pinterest Clone Social Pinboard 2.0 - SQL Injection2018-02-16 · webapps · php · Verified
Impact
SQL Injection exists in the Pinterest Clone Social Pinboard 2.0 component for Joomla! via the pin_id or user_id parameter in a task=getlikeinfo action, the ends parameter in a view=gift action, the category parameter in a view=home action, the uid parameter in a view=pindisplay action, the searchVal parameter in a view=search action, or the uid parameter in a view=likes action.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Social Pinboard Project | Social Pinboard | Version 2.0 |