critical9.8Public exploit code
CVE-2018-7319
SQL Injection exists in the OS Property Real Estate 3.12.7 component for Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! Component OS Property Real Estate 3.12.7 - SQL Injection2018-02-22 · webapps · php
Impact
SQL Injection exists in the OS Property Real Estate 3.12.7 component for Joomla! via the cooling_system1, heating_system1, or laundry parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Os Property Real Estate Project | Os Property Real Estate | Version 3.12.7 |