exploitDog

CVE-2018-12254

Опубликовано: 12 июн. 2018

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

router.php in the Harmis Ek rishta (aka ek-rishta) 2.10 component for Joomla! allows SQL Injection via the PATH_INFO to a home/requested_user/Sent%20interest/ URI.

Ссылки

https://m4k4br0.github.io/sql-injection-joomla-component/
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/44893/
Exploit
Third Party Advisory
VDB Entry
https://m4k4br0.github.io/sql-injection-joomla-component/
Exploit
Third Party Advisory
https://www.exploit-db.com/exploits/44893/
Exploit
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:harmistechnology:ek_rishta:2.10:*:*:*:*:joomla\!:*:*

EPSS

Процентиль: 58%

0.00365

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-4359-9c9p-4q45

CVSS3: 8.8

github

больше 3 лет назад

router.php in the Harmis Ek rishta (aka ek-rishta) 2.10 component for Joomla! allows SQL Injection via the PATH_INFO to a home/requested_user/Sent%20interest/ URI.

EPSS

Процентиль: 58%

0.00365

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89