PT-2018-17936 · Joomla · Saxum Astro

Ihsan Sencan · Published 2018-02-17 · Updated 2018-03-02 · CVE-2018-7180

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Saxum Astro version 4.0.14

Description A SQL Injection issue exists in the Saxum Astro component for Joomla!, which can be exploited via the publicid parameter.

Recommendations For Saxum Astro version 4.0.14, avoid using the publicid parameter in the affected component until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2018-7180

Affected Products

Saxum Astro

References · 3

• 🔥 https://exploit-db.com/exploits/44133 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-7180 · Security Note
• https://osv.dev/vulnerability/CVE-2018-7180 · Vendor Advisory