CVE-2018-7315

CVE-2018-7315 is a SQL injection vulnerability in Joomla! Ek Rishta 2.9 (and earlier) where an attacker can exploit parameters such as gender, age1, age2, religion, mothertounge, caste, or country to access or modify backend database. The issue affects the Ek Rishta component for Joomla and is do...

CVE-2018-12254

CVE-2018-12254 affects the Joomla! Ek Rishta (Harmis Ek rishta) 2.10 component. The vulnerability is a SQL injection in router.php that can be triggered via PATH_INFO to the URI path home/requested_user/Sent%20interest/[username], due to improper handling of input. This allows arbitrary SQL comma...