NetSight
critical9.8Public exploit code

CVE-2018-6368

SQL Injection exists in the JomEstate PRO through 3.7 component for Joomla!

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

SQL Injection exists in the JomEstate PRO through 3.7 component for Joomla! via the id parameter in a task=detailed action.

Affected products

VendorProductAffected versions
ComdevJomestate Pro
through 3.7

Weakness classification

References