PT-2018-17287
CVE-2018-6004
·
Published
2018-02-17
·
Updated
2018-03-02
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Joomla! File Download Tracker version 3.0
Description:
A SQL Injection issue exists in the File Download Tracker component for Joomla!, which can be exploited via the
dynfield[phone] or sess parameter.Recommendations:
For Joomla! File Download Tracker version 3.0, update to a newer version that contains a fix for this issue. As a temporary workaround, consider restricting access to the
dynfield[phone] and sess parameters to minimize the risk of exploitation.Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾