CVE-2018-17383

CVE-2018-17383 concerns a SQL Injection in the Joomla! component “Collection Factory” version 4.1.9. The vulnerability is triggered via user-controllable inputs in the query path, specifically the parameters filter_order and filter_order_Dir , allowing an attacker to manipulate SQL commands execu...

PT-2018-14002

Name of the Vulnerable Software and Affected Versions Raffle Factory version 3.5.2 Description A SQL Injection issue exists in the Raffle Factory component for Joomla, specifically via the filter order Dir or filter order parameters. Recommendations For version 3.5.2, consider restricting access ...

CVE-2018-17379: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filterorderDir or filterorder parameter...

CVE-2018-17385

SQL Injection exists in the Social Factory 3.8.3 component for Joomla! via the radiuslat, radiuslng, or radiusradius parameter...

CVE-2018-17379

SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filterorderDir or filterorder parameter...

PT-2018-14008

Name of the Vulnerable Software and Affected Versions Joomla! Social Factory version 3.8.3 Description A SQL Injection issue exists in the Social Factory component for Joomla!, which can be exploited via the radiuslat, radiuslng, or radiusradius parameter. Recommendations For version 3.8.3,...

CVE-2018-17376: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filterorderDir, cat, or filterletter parameter...

CVE-2018-17385: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Social Factory 3.8.3 component for Joomla! via the radiuslat, radiuslng, or radiusradius parameter...

CVE-2018-17383: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filterorder or filterorderDir parameter...

PT-2018-13999

Name of the Vulnerable Software and Affected Versions Joomla! Reverse Auction Factory version 4.3.8 Description A SQL Injection issue exists in the Reverse Auction Factory component for Joomla!. This issue can be exploited via the filter order Dir, cat, or filter letter parameters. Recommendation...

PT-2018-14006

Name of the Vulnerable Software and Affected Versions Joomla! Collection Factory version 4.1.9 Description A SQL Injection issue exists in the Collection Factory component for Joomla!, which can be exploited via the filter order or filter order Dir parameter. Recommendations For version 4.1.9,...

PT-2018-14007

Name of the Vulnerable Software and Affected Versions Joomla! Swap Factory version 2.2.1 Description A SQL Injection issue exists in the Swap Factory component for Joomla!, which can be exploited via the filter order Dir or filter order parameter. Recommendations For version 2.2.1, consider...

CVE-2018-17384

CVE-2018-17384 affects Joomla! Swap Factory 2.2.1. The vulnerability is a SQL Injection in the Swap Factory component, exploitable via the filter_order_Dir and filter_order parameters, allowing an attacker to manipulate database queries. Root cause is unsafe handling of user input in the affected...

CVE-2018-17384: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filterorderDir or filterorder parameter...

Component Auction Factory 'filter_order' SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Joomla! component Auction Factory 'filterorder', which can be exploited by attackers to obtain sensitive database information...

Component Swap Factory SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Swap Factory component of Joomla! The vulnerability is caused by inserting SQL commands into the query string of a web form submission or...

Social Factory SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Social Factory component of Joomla! The vulnerability is caused by inserting SQL commands into the query string of a web form submission ...

Jobs Factory SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Jobs Factory component of Joomla! The vulnerability is caused by inserting SQL commands into the query string of a web form submission or...

Component Raffle Factory SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Joomla! component Raffle Factory. The vulnerability is caused by inserting SQL commands into the query string of a web form submission or...

Component Reverse Auction Factory SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Reverse Auction Factory component of Joomla! The vulnerability is caused by inserting SQL commands into the query string of a web form...