PT-2018-18022 · Joomla · Os Property Real Estate
Ihsan Sencan
·
Published
2018-02-22
·
Updated
2018-03-02
·
CVE-2018-7319
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
OS Property Real Estate version 3.12.7
Description
A SQL Injection issue exists in the OS Property Real Estate component for Joomla!, which can be exploited via the
cooling system1, heating system1, or laundry parameter.Recommendations
For OS Property Real Estate version 3.12.7, consider restricting access to the vulnerable parameters
cooling system1, heating system1, and laundry until a patch is available. At the moment, there is no information about a newer version that contains a fix for this issue.Exploit
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Os Property Real Estate