CVE-2018-17382

CVE-2018-17382 affects Joomla! Jobs Factory 2.0.4 via SQL Injection in the filter_letter parameter. The vulnerability is confirmed by multiple sources (NVD entry and third-party advisories) and is rated high/critical (CVSS v2 base 7.5, CVSS v3 base 9.8). Exploit references exist (Exploit-DB, Pack...

CVE-2018-17384

SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filterorderDir or filterorder parameter...

CVE-2018-17376

CVE-2018-17376 affects Joomla! Reverse Auction Factory 4.3.8; SQL injection via filter_order_Dir, cat, or filter_letter in listauctions. Public exploits exist (Exploit-DB) and the CVSS v3 base score is 9.8 (CRITICAL). No patch/version remediation details are provided in the supplied documents.

CVE-2018-17375

SQL Injection exists in the Music Collection 3.0.3 component for Joomla! via the id parameter...

CVE-2018-17380

CVE-2018-17380 affects Joomla! Article Factory Manager 4.3.9. The vulnerability is a SQL Injection in the Article Factory Manager component, exploitable via the start_date, m_start_date, or m_end_date parameters in the affected extension. Root cause: unsafely constructed SQL queries derived from ...

CVE-2018-17385

SQL Injection exists in the Social Factory 3.8.3 component for Joomla! via the radiuslat, radiuslng, or radiusradius parameter...

CVE-2018-17385

CVE-2018-17385 affects the Joomla! Social Factory 3.8.3 component. The vulnerability is a SQL Injection in the Social Factory radius search endpoint, exploitable via the radius[lat], radius[lng], or radius[radius] parameters. Public references (Packet Storm, Exploit-DB, CVE lists) describe a craf...

CVE-2018-17376

SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filterorderDir, cat, or filterletter parameter...

CVE-2018-17377

CVE-2018-17377 affects the Joomla! extension component “Questions” version 1.4.3, where an SQL injection is possible via the term, userid, users, or groups parameters in the Questions 1.4.3 component. The root cause is improper handling of user-supplied input in queries, enabling an attacker to a...

CVE-2018-17377

SQL Injection exists in the Questions 1.4.3 component for Joomla! via the term, userid, users, or groups parameter...

CVE-2018-17379

SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filterorderDir or filterorder parameter...

CVE-2018-17378

The CVE-2018-17378 entry describes a SQL injection vulnerability in Joomla! Penny Auction Factory 2.0.4, exploitable via the filter_order_Dir or filter_order parameters. Affected component: Penny Auction Factory 2.0.4 for Joomla!. Root cause: unsanitized user input in query construction leading t...

Component Dutch Auction Factory 'filter_order_Dir' SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Dutch Auction Factory 'filterorderDir' component of Joomla! An attacker can insert SQL commands into the query string of a web form...

Component Responsive Portfolio 'filter_order_Dir' SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Responsive Portfolio 'filterorderDir' component of Joomla! An attacker can execute SQL commands by including vulnerable parameters...

Component Raffle Factory SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Joomla! component Raffle Factory. The vulnerability is caused by inserting SQL commands into the query string of a web form submission or...

Questions SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Questions component of Joomla! The vulnerability is caused by inserting SQL commands into the query string of a web form submission or...

Component Collection Factory SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Collection Factory component of Joomla! The vulnerability is caused by inserting SQL commands into the query string of a web form...

Component Swap Factory SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Swap Factory component of Joomla! The vulnerability is caused by inserting SQL commands into the query string of a web form submission or...

Component eXtroForms 'filter_type_id' SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Joomla! component eXtroForms 'filtertypeid'. An attacker can execute SQL commands by including vulnerable parameters...

Component Auction Factory 'filter_order' SQL Injection Vulnerability in Joomla!

Joomla! is the United States Open Source Matters team developed a set of open source content management system CMS. A SQL injection vulnerability exists in the Joomla! component Auction Factory 'filterorder', which can be exploited by attackers to obtain sensitive database information...