Lucene search
+L
ThephpfactoryCollection Factory

1 matches found

CVE
CVE
added 2018/09/28 12:0 a.m.64 views

CVE-2018-17383

CVE-2018-17383 concerns a SQL Injection in the Joomla! component “Collection Factory” version 4.1.9. The vulnerability is triggered via user-controllable inputs in the query path, specifically the parameters filter_order and filter_order_Dir , allowing an attacker to manipulate SQL commands execu...

9.8CVSS9.9AI score0.03213EPSS
Save