3 matches found
Sql injection
SQL Injection exists in the MediaLibrary Free 4.0.12 component for Joomla! via the id parameter or the mid array parameter...
7.5CVSS9.8AI score0.02652EPSS
SaveExploits6References1Affected Software1
PT-2018-17257
Name of the Vulnerable Software and Affected Versions: MediaLibrary Free version 4.0.12 Description: A SQL Injection issue exists in the MediaLibrary Free component for Joomla!, which can be exploited via the id parameter or the mid array parameter. Recommendations: For MediaLibrary Free version...
9.8CVSS0.02652EPSS
SaveExploits6References3
CVE-2018-5971: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the MediaLibrary Free 4.0.12 component for Joomla! via the id parameter or the mid array parameter...
9.8CVSS8.2AI score0.02652EPSS
SaveExploits6References2
20