3 matches found
CVE-2018-6394
SQL Injection exists in the InviteX 3.0.5 component for Joomla! via the invitetype parameter in a view=invites action...
9.8CVSS5.8AI score0.02652EPSS
SaveExploits5References1
PT-2018-17529
Name of the Vulnerable Software and Affected Versions InviteX version 3.0.5 Description A SQL Injection issue exists in the InviteX component for Joomla!, specifically via the invite type parameter in a "view=invites" action. Recommendations For InviteX version 3.0.5, consider restricting access ...
9.8CVSS0.02652EPSS
SaveExploits5References3
CVE-2018-6394: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection exists in the InviteX 3.0.5 component for Joomla! via the invitetype parameter in a view=invites action...
9.8CVSS8.2AI score0.02652EPSS
SaveExploits5References2
20