PT-2018-17935 · Open Source Matters+1 · Joomla!+1

CVE-2018-7179

Publicado

2018-02-17

Atualizado

2018-03-02

CVSS v3.1

9.8

Crítica

Vetor

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Joomla! SquadManagement version 1.0.3

Description A SQL Injection issue exists in the SquadManagement component for Joomla!, which can be exploited via the id parameter.

Recommendations For Joomla! SquadManagement version 1.0.3, avoid using the id parameter in the affected component until the issue is resolved.

Exploit

Correção

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

CVE-2018-7179

Joomla!

Squadmanagement