CVE-2018-6585

CVE-2018-6585 concerns Joomla! JTicketing component 2.0.16 (and earlier) where SQL injection is possible through the events view using filter_creator or filter_events_cat parameters. The root cause is untrusted input used in the query construction, enabling an attacker to manipulate the database....