CVE-2018-6394

SQL Injection exists in the InviteX 3.0.5 component for Joomla! via the invitetype parameter in a view=invites action...

CVE-2018-6394: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection exists in the InviteX 3.0.5 component for Joomla! via the invitetype parameter in a view=invites action...

PT-2018-17529

Name of the Vulnerable Software and Affected Versions InviteX version 3.0.5 Description A SQL Injection issue exists in the InviteX component for Joomla!, specifically via the invite type parameter in a "view=invites" action. Recommendations For InviteX version 3.0.5, consider restricting access ...