CVE-2018-12254

router.php in the Harmis Ek rishta aka ek-rishta 2.10 component for Joomla! allows SQL Injection via the PATHINFO to a home/requesteduser/Sent%20interest/ URI...

PT-2018-11078

Name of the Vulnerable Software and Affected Versions Harmis Ek rishta aka ek-rishta version 2.10 Description The issue allows SQL Injection via the PATH INFO to a home/requested user/Sent%20interest/ URI in the router.php file. Recommendations For version 2.10, consider restricting access to the...