critical9.8Public exploit code
CVE-2018-6581
SQL Injection exists in the JMS Music 1.1.1 component for Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Component JMS Music 1.1.1 - SQL Injection2018-02-02 · webapps · php
Impact
SQL Injection exists in the JMS Music 1.1.1 component for Joomla! via a search with the keyword, artist, or username parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joommasters | Jms Music | Version 1.1.1 |