CVE-2018-7318

SQL Injection exists in the CheckList 1.1.1 component for Joomla! via the titlesearch, tagsearch, namesearch, descriptionsearch, or filterorder parameter...

Directory traversal

Directory traversal vulnerability in search.php in EdiorCMS ecms 3.0 allows remote attackers to read arbitrary files via a .. dot dot in the SearchTemplate parameter during a Title search...