PT-2018-18017 · Joomla · Joomla! Cw Tags
Ihsan Sencan
·
Published
2018-02-22
·
Updated
2018-03-05
·
CVE-2018-7313
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Joomla! CW Tags component version 2.0.6
Description
A SQL Injection issue exists in the CW Tags component for Joomla!, which can be exploited via the
searchtext array parameter in the API endpoint.Recommendations
For version 2.0.6, consider restricting access to the vulnerable component until a patch is available. As a temporary workaround, avoid using the
searchtext array parameter in the affected API endpoint until the issue is resolved.Exploit
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Joomla! Cw Tags