CVE-2018-25351: Improper Neutralization of Special Elements used in an SQL Command

Joomla! Component EkRishta 2.10 contains an error-based SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the username parameter. Attackers can submit POST requests to the login endpoint with SQL injection payloads ...

Joomla! Component EkRishta SQL Injection

An SQL injection vulnerability exists in Joomla! Component EkRishta. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...