2 matches found
CVE-2018-6368: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the JomEstate PRO through 3.7 component for Joomla! via the id parameter in a task=detailed action...
9.8CVSS8.2AI score0.02652EPSS
SaveExploits4References2
PT-2018-17510
Name of the Vulnerable Software and Affected Versions JomEstate PRO versions through 3.7 Description A SQL Injection issue exists via the id parameter in a "task=detailed" action, allowing potential exploitation. Recommendations For JomEstate PRO versions through 3.7, avoid using the id parameter...
9.8CVSS0.02652EPSS
SaveExploits4References3
20