critical9.8Public exploit code
CVE-2018-5990
SQL Injection exists in the AllVideos Reloaded 1.2.x component for Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Component AllVideos Reloaded 1.2.x - 'divid' SQL Injection2018-02-16 · webapps · php · Verified
Impact
SQL Injection exists in the AllVideos Reloaded 1.2.x component for Joomla! via the divid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Allvideos Reloaded Project | Allvideos Reloaded | from 1.2 through 1.2.7 |