CVE-2018-17374

CVE-2018-17374 describes a SQL Injection in the Joomla! Auction Factory 4.5.5 component exposed through the filter_order_Dir or filter_order parameters. The vulnerability stems from unsafe handling of externally entered SQL statements in this component. According to the linked records, the CVE ha...