PT-2018-18017 · Joomla · Joomla! Cw Tags

Ihsan Sencan · Publicado 2018-02-22 · Atualizado 2018-03-05 · CVE-2018-7313

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Joomla! CW Tags component version 2.0.6

Description A SQL Injection issue exists in the CW Tags component for Joomla!, which can be exploited via the searchtext array parameter in the API endpoint.

Recommendations For version 2.0.6, consider restricting access to the vulnerable component until a patch is available. As a temporary workaround, avoid using the searchtext array parameter in the affected API endpoint until the issue is resolved.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2018-7313

Produtos afetados

Joomla! Cw Tags

Referências · 3

• 🔥 https://exploit-db.com/exploits/44158 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-7313 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-7313 · Aviso do Fabricante