Lucene search

CVE-2018-6370

🗓️ 17 Feb 2018 07:01:29Reported by mitreType

cve🔗 web.nvd.nist.gov👁 40 Views🌐 WEB

SQL Injection in NeoRecruit 4.1 component for Joomla! via PATH_INFO or .html file name

Reporter	Title	Published	Views	Family All 8
0day.today	Joomla NeoRecruit 4.1 Component - SQL Injection Vulnerability	17 Feb 201800:00	–	zdt
Exploit DB	Joomla! Component NeoRecruit 4.1 - SQL Injection	16 Feb 201800:00	–	exploitdb
Joomla! Vulnerable Extensions List	NeoRecruit, 4.2.1, SQL Injection	5 Mar 201800:00	–	joomla
Packet Storm	Joomla! NeoRecruit 4.1 SQL Injection	17 Feb 201800:00	–	packetstorm
Cvelist	CVE-2018-6370	17 Feb 201807:00	–	cvelist
Prion	Sql injection	17 Feb 201807:29	–	prion
NVD	CVE-2018-6370	17 Feb 201807:29	–	nvd
exploitpack	Joomla! Component NeoRecruit 4.1 - SQL Injection	16 Feb 201800:00	–	exploitpack

Nvd

Node

neojoomla neorecruitMatch4.1joomla\!

Source	Link
exploit-db	www.exploit-db.com/exploits/44123

Parameter	Position	Path	Description	CWE
xxx[SQL]	path	/neorecruit/all-offers/xxx[SQL].html	SQL Injection vulnerability in Joomla! Component NeoRecruit 4.1 allowing attacker to manipulate database queries via crafted paths.	CWE-89
xxx[SQL]	path	/neorecruit/xxx/xxx[SQL]	SQL Injection vulnerability in Joomla! Component NeoRecruit 4.1 allowing attacker to manipulate database queries via crafted paths.	CWE-89

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

17 Feb 2018 07:29Current

9.8High risk

Vulners AI Score9.8

CVSS27.5

CVSS39.8

EPSS0.00242

CWE-89