PT-2018-18022 · Joomla · Os Property Real Estate

Ihsan Sencan · Publicado 2018-02-22 · Atualizado 2018-03-02 · CVE-2018-7319

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OS Property Real Estate version 3.12.7

Description A SQL Injection issue exists in the OS Property Real Estate component for Joomla!, which can be exploited via the cooling system1, heating system1, or laundry parameter.

Recommendations For OS Property Real Estate version 3.12.7, consider restricting access to the vulnerable parameters cooling system1, heating system1, and laundry until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2018-7319

Produtos afetados

Os Property Real Estate

Referências · 3

• 🔥 https://exploit-db.com/exploits/44165 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-7319 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-7319 · Aviso do Fabricante