PT-2018-3604 · Open Source Matters · Joomla!

Publicado 2018-02-22 · Atualizado 2021-01-30 · CVE-2018-7318

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Joomla! CheckList component version 1.1.1

Description The issue is related to SQL Injection in the CheckList component of Joomla!. This occurs due to inadequate protection against SQL query structure exploitation. An attacker can exploit this to execute arbitrary SQL commands remotely. The vulnerability can be exploited via the title search, tag search, name search, description search, or filter order parameter.

Recommendations For Joomla! CheckList component version 1.1.1, consider disabling the component until a patch is available to prevent exploitation. Restrict access to the parameters title search, tag search, name search, description search, and filter order to minimize the risk of SQL Injection attacks.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

BDU:2021-01066

CVE-2018-7318

Produtos afetados

Joomla!

Referências · 6

• 🔥 https://exploit-db.com/exploits/44163 · Exploit
• https://osv.dev/vulnerability/CVE-2018-7318 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2021-01066 · Nota de Segurança
• https://oracle.com/security-alerts/cpujan2021.html · Nota
• https://t.me/cvenotify/9164 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2018-7318 · Nota de Segurança