PT-2018-17279 · Open Source Matters+1 · Joomla!+1

Ihsan Sencan

·

Publicado

2018-02-17

·

Atualizado

2018-03-01

·

CVE-2018-5993

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Joomla! Aist component versions through 2.0
Description: A SQL Injection issue exists in the Aist component for Joomla! via the id parameter in a "view=showvacancy" request.
Recommendations: For Joomla! Aist component versions through 2.0, avoid using the id parameter in the "view=showvacancy" request until a patch is available. As a temporary workaround, consider restricting access to the Aist component to minimize the risk of exploitation.

Exploit

Correção

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2018-5993

Produtos afetados

Aist
Joomla!