CVE-2018-25067

CVE-2018-25067 affects JoomGallery up to 3.3.3. The SQL injection vulnerability is in the Image Sort Handler, specifically in administrator/components/com_joomgallery/views/config/tmpl/default.php. Upgrading to 3.3.4 mitigates the issue (patch DC414EE954E849082260F8613E15A1C1E1D354A1; VDB-217569).

CVE-2018-25067 JoomGallery Image Sort default.php sql injection

A vulnerability, which was classified as critical, was found in JoomGallery up to 3.3.3. This affects an unknown part of the file administrator/components/comjoomgallery/views/config/tmpl/default.php of the component Image Sort Handler. The manipulation leads to sql injection. Upgrading to versio...