critical9.8Public exploit code
CVE-2018-7318
SQL Injection exists in the CheckList 1.1.1 component for Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Component CheckList 1.1.1 - SQL Injection2018-02-22 · webapps · php
Impact
SQL Injection exists in the CheckList 1.1.1 component for Joomla! via the title_search, tag_search, name_search, description_search, or filter_order parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Belitsoft | Checklist | Version 1.1.1 |
| Oracle | Data Integrator | Versions 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 |