Checklist by Joomplace, 1.1.1.003, SQL Injection

2018-03-0600:00:00

velteam

vel.joomla.org

533

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.004

Percentile

73.5%

JSON

Checklist by Joomplace, versions 1.1.1.003 and previous, SQL Injection

resolution: update to 1.1.1.004

Update notice: https://www.joomplace.com/blog/security-update-for-checklist.html

Affected configurations

Vulners

Node

joomlajoomla_checklist_packageMatch1.1.1.003

joomlajoomla_checklist_packageRange<1.1.1.004

VendorProductVersionCPE
joomlajoomla_checklist_package1.1.1.003cpe:2.3:a:joomla:joomla_checklist_package:1.1.1.003:*:*:*:*:*:*:*
joomlajoomla_checklist_package*cpe:2.3:a:joomla:joomla_checklist_package:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
joomla	joomla_checklist_package	1.1.1.003	cpe:2.3:a:joomla:joomla_checklist_package:1.1.1.003:::::::*
joomla	joomla_checklist_package	*	cpe:2.3:a:joomla:joomla_checklist_package::::::::