Security Vulnerabilities - CVEs Published In February 2018
SQL Injection exists in the Saxum Astro 4.0.14 component for Joomla! via the publicid parameter.
CVSS Score
9.8
EPSS Score
0.015
Published
2018-02-17
SQL Injection exists in the JGive 2.0.9 component for Joomla! via the filter_org_ind_type or campaign_countries parameter.
CVSS Score
9.8
EPSS Score
0.015
Published
2018-02-17
SQL Injection exists in the MediaLibrary Free 4.0.12 component for Joomla! via the id parameter or the mid array parameter.
CVSS Score
9.8
EPSS Score
0.015
Published
2018-02-17
SQL Injection exists in the SimpleCalendar 3.1.9 component for Joomla! via the catid array parameter.
CVSS Score
9.8
EPSS Score
0.015
Published
2018-02-17
SQL Injection exists in the Smart Shoutbox 3.0.0 component for Joomla! via the shoutauthor parameter to the archive URI.
CVSS Score
9.8
EPSS Score
0.015
Published
2018-02-17
SQL Injection exists in the Solidres 2.5.1 component for Joomla! via the direction parameter in a hub.search action.
CVSS Score
9.8
EPSS Score
0.015
Published
2018-02-17
SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tag_id parameter or gallery_id parameter.
CVSS Score
9.8
EPSS Score
0.005
Published
2018-02-17
SQL Injection exists in the Advertisement Board 3.1.0 component for Joomla! via a task=show_rss_categories&catname= request.
CVSS Score
9.8
EPSS Score
0.015
Published
2018-02-17
SQL Injection exists in the JquickContact 1.3.2.2.1 component for Joomla! via a task=refresh&sid= request.
CVSS Score
9.8
EPSS Score
0.015
Published
2018-02-17
SQL Injection exists in the Pinterest Clone Social Pinboard 2.0 component for Joomla! via the pin_id or user_id parameter in a task=getlikeinfo action, the ends parameter in a view=gift action, the category parameter in a view=home action, the uid parameter in a view=pindisplay action, the searchVal parameter in a view=search action, or the uid parameter in a view=likes action.
CVSS Score
9.8
EPSS Score
0.015
Published
2018-02-17