CVEs published February 17, 2018
31 CVEs were published on February 17, 2018: 0 critical, 0 high.
- Published
- 31
- Critical
- 0
- High
- 0
- Medium
- 0
- Low
- 0
- Unrated
- 31
- Now in CISA KEV
- 0
- Fix available
- 0
Medium, low and unrated 31
- CVE-2018-5970SQL Injection exists in the JGive 2.0.9 component for Joomla! via the filter_org_ind_type or campaign_countries parameter.
- CVE-2018-5971SQL Injection exists in the MediaLibrary Free 4.0.12 component for Joomla! via the id parameter or the mid array parameter.
- CVE-2018-5974SQL Injection exists in the SimpleCalendar 3.1.9 component for Joomla! via the catid array parameter.
- CVE-2018-5975SQL Injection exists in the Smart Shoutbox 3.0.0 component for Joomla! via the shoutauthor parameter to the archive URI.
- CVE-2018-5980SQL Injection exists in the Solidres 2.5.1 component for Joomla! via the direction parameter in a hub.search action.
- CVE-2018-5981SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tag_id parameter or gallery_id parameter.
- CVE-2018-5982SQL Injection exists in the Advertisement Board 3.1.0 component for Joomla! via a task=show_rss_categories&catname= request.
- CVE-2018-5983SQL Injection exists in the JquickContact 1.3.2.2.1 component for Joomla! via a task=refresh&sid= request.
- CVE-2018-5987SQL Injection exists in the Pinterest Clone Social Pinboard 2.0 component for Joomla! via the pin_id or user_id parameter in a task=getlikei
- CVE-2018-5989SQL Injection exists in the ccNewsletter 2.x component for Joomla! via the id parameter in a task=removeSubscriber action, a related issue t
- CVE-2018-5990SQL Injection exists in the AllVideos Reloaded 1.2.x component for Joomla! via the divid parameter.
- CVE-2018-5991SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats request, a different v
- CVE-2018-5992SQL Injection exists in the Staff Master through 1.0 RC 1 component for Joomla! via the name parameter in a view=staff request.
- CVE-2018-5993SQL Injection exists in the Aist through 2.0 component for Joomla! via the id parameter in a view=showvacancy request.
- CVE-2018-5994SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or the ta parameter in a
- CVE-2018-6004SQL Injection exists in the File Download Tracker 3.0 component for Joomla! via the dynfield[phone] or sess parameter.
- CVE-2018-6005SQL Injection exists in the Realpin through 1.5.04 component for Joomla! via the pinboard parameter.
- CVE-2018-6006SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter.
- CVE-2018-6368SQL Injection exists in the JomEstate PRO through 3.7 component for Joomla! via the id parameter in a task=detailed action.
- CVE-2018-6370SQL Injection exists in the NeoRecruit 4.1 component for Joomla! via the (1) PATH_INFO or (2) name of a .html file under the all-offers/ URI
- CVE-2018-6372SQL Injection exists in the JB Bus 2.3 component for Joomla! via the order_number parameter.
- CVE-2018-6373SQL Injection exists in the Fastball 2.5 component for Joomla! via the season parameter in a view=player action.
- CVE-2018-6394SQL Injection exists in the InviteX 3.0.5 component for Joomla! via the invite_type parameter in a view=invites action.
- CVE-2018-6396SQL Injection exists in the Google Map Landkarten through 4.2.3 component for Joomla! via the cid or id parameter in a layout=form_markers a
- CVE-2018-6583SQL Injection exists in the Timetable Responsive Schedule 1.5 component for Joomla! via a view=event&alias= request.
- CVE-2018-6584SQL Injection exists in the DT Register 3.2.7 component for Joomla! via a task=edit&id= request.
- CVE-2018-6585SQL Injection exists in the JTicketing 2.0.16 component for Joomla! via a view=events action with a filter_creator or filter_events_cat para
- CVE-2018-7177SQL Injection exists in the Saxum Numerology 3.0.4 component for Joomla! via the publicid parameter.
- CVE-2018-7178SQL Injection exists in the Saxum Picker 3.2.10 component for Joomla! via the publicid parameter.
- CVE-2018-7179SQL Injection exists in the SquadManagement 1.0.3 component for Joomla! via the id parameter.
- CVE-2018-7180SQL Injection exists in the Saxum Astro 4.0.14 component for Joomla! via the publicid parameter.