CVE-2018-6585

Name of the Vulnerable Software and Affected Versions JTicketing version 2.0.16

Description A SQL Injection issue exists in the JTicketing component for Joomla. This issue can be exploited via a "view=events" action, specifically through the filter creator or filter events cat parameters.

Recommendations For JTicketing version 2.0.16, consider restricting access to the "view=events" action or avoiding the use of the filter creator and filter events cat parameters until a fix is available. At the moment, there is no information about a newer version that contains a fix for this issue.