3 matches found
CVE-2018-6004
SQL Injection exists in the File Download Tracker 3.0 component for Joomla! via the dynfieldphone or sess parameter...
9.8CVSS5.8AI score0.02652EPSS
SaveExploits5References1
PT-2018-17287
Name of the Vulnerable Software and Affected Versions: Joomla! File Download Tracker version 3.0 Description: A SQL Injection issue exists in the File Download Tracker component for Joomla!, which can be exploited via the dynfieldphone or sess parameter. Recommendations: For Joomla! File Download...
9.8CVSS0.02652EPSS
SaveExploits5References3
CVE-2018-6004: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the File Download Tracker 3.0 component for Joomla! via the dynfieldphone or sess parameter...
9.8CVSS8.2AI score0.02652EPSS
SaveExploits5References2
20