# CVEs published 2018-02-17

31 CVEs were published on February 17, 2018: 0 critical, 0 high. Days are UTC.

- [CVE-2018-5970](https://cve.now/CVE-2018-5970.md): SQL Injection exists in the JGive 2.0.9 component for Joomla! via the filter\_org\_ind\_type or campaign\_countries parameter. (no CVSS)
- [CVE-2018-5971](https://cve.now/CVE-2018-5971.md): SQL Injection exists in the MediaLibrary Free 4.0.12 component for Joomla! via the id parameter or the mid array parameter. (no CVSS)
- [CVE-2018-5974](https://cve.now/CVE-2018-5974.md): SQL Injection exists in the SimpleCalendar 3.1.9 component for Joomla! via the catid array parameter. (no CVSS)
- [CVE-2018-5975](https://cve.now/CVE-2018-5975.md): SQL Injection exists in the Smart Shoutbox 3.0.0 component for Joomla! via the shoutauthor parameter to the archive URI. (no CVSS)
- [CVE-2018-5980](https://cve.now/CVE-2018-5980.md): SQL Injection exists in the Solidres 2.5.1 component for Joomla! via the direction parameter in a hub.search action. (no CVSS)
- [CVE-2018-5981](https://cve.now/CVE-2018-5981.md): SQL Injection exists in the Gallery WD 1.3.6 component for Joomla! via the tag\_id parameter or gallery\_id parameter. (no CVSS)
- [CVE-2018-5982](https://cve.now/CVE-2018-5982.md): SQL Injection exists in the Advertisement Board 3.1.0 component for Joomla! via a task=show\_rss\_categories&catname= request. (no CVSS)
- [CVE-2018-5983](https://cve.now/CVE-2018-5983.md): SQL Injection exists in the JquickContact 1.3.2.2.1 component for Joomla! via a task=refresh&sid= request. (no CVSS)
- [CVE-2018-5987](https://cve.now/CVE-2018-5987.md): SQL Injection exists in the Pinterest Clone Social Pinboard 2.0 component for Joomla! via the pin\_id or user\_id parameter in a task=getlikei (no CVSS)
- [CVE-2018-5989](https://cve.now/CVE-2018-5989.md): SQL Injection exists in the ccNewsletter 2.x component for Joomla! via the id parameter in a task=removeSubscriber action, a related issue t (no CVSS)
- [CVE-2018-5990](https://cve.now/CVE-2018-5990.md): SQL Injection exists in the AllVideos Reloaded 1.2.x component for Joomla! via the divid parameter. (no CVSS)
- [CVE-2018-5991](https://cve.now/CVE-2018-5991.md): SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats request, a different v (no CVSS)
- [CVE-2018-5992](https://cve.now/CVE-2018-5992.md): SQL Injection exists in the Staff Master through 1.0 RC 1 component for Joomla! via the name parameter in a view=staff request. (no CVSS)
- [CVE-2018-5993](https://cve.now/CVE-2018-5993.md): SQL Injection exists in the Aist through 2.0 component for Joomla! via the id parameter in a view=showvacancy request. (no CVSS)
- [CVE-2018-5994](https://cve.now/CVE-2018-5994.md): SQL Injection exists in the JS Jobs 1.1.9 component for Joomla! via the zipcode parameter in a newest-jobs request, or the ta parameter in a (no CVSS)
- [CVE-2018-6004](https://cve.now/CVE-2018-6004.md): SQL Injection exists in the File Download Tracker 3.0 component for Joomla! via the dynfield\[phone\] or sess parameter. (no CVSS)
- [CVE-2018-6005](https://cve.now/CVE-2018-6005.md): SQL Injection exists in the Realpin through 1.5.04 component for Joomla! via the pinboard parameter. (no CVSS)
- [CVE-2018-6006](https://cve.now/CVE-2018-6006.md): SQL Injection exists in the JS Autoz 1.0.9 component for Joomla! via the vtype, pre, or prs parameter. (no CVSS)
- [CVE-2018-6368](https://cve.now/CVE-2018-6368.md): SQL Injection exists in the JomEstate PRO through 3.7 component for Joomla! via the id parameter in a task=detailed action. (no CVSS)
- [CVE-2018-6370](https://cve.now/CVE-2018-6370.md): SQL Injection exists in the NeoRecruit 4.1 component for Joomla! via the (1) PATH\_INFO or (2) name of a .html file under the all-offers/ URI (no CVSS)
- [CVE-2018-6372](https://cve.now/CVE-2018-6372.md): SQL Injection exists in the JB Bus 2.3 component for Joomla! via the order\_number parameter. (no CVSS)
- [CVE-2018-6373](https://cve.now/CVE-2018-6373.md): SQL Injection exists in the Fastball 2.5 component for Joomla! via the season parameter in a view=player action. (no CVSS)
- [CVE-2018-6394](https://cve.now/CVE-2018-6394.md): SQL Injection exists in the InviteX 3.0.5 component for Joomla! via the invite\_type parameter in a view=invites action. (no CVSS)
- [CVE-2018-6396](https://cve.now/CVE-2018-6396.md): SQL Injection exists in the Google Map Landkarten through 4.2.3 component for Joomla! via the cid or id parameter in a layout=form\_markers a (no CVSS)
- [CVE-2018-6583](https://cve.now/CVE-2018-6583.md): SQL Injection exists in the Timetable Responsive Schedule 1.5 component for Joomla! via a view=event&alias= request. (no CVSS)
- [CVE-2018-6584](https://cve.now/CVE-2018-6584.md): SQL Injection exists in the DT Register 3.2.7 component for Joomla! via a task=edit&id= request. (no CVSS)
- [CVE-2018-6585](https://cve.now/CVE-2018-6585.md): SQL Injection exists in the JTicketing 2.0.16 component for Joomla! via a view=events action with a filter\_creator or filter\_events\_cat para (no CVSS)
- [CVE-2018-7177](https://cve.now/CVE-2018-7177.md): SQL Injection exists in the Saxum Numerology 3.0.4 component for Joomla! via the publicid parameter. (no CVSS)
- [CVE-2018-7178](https://cve.now/CVE-2018-7178.md): SQL Injection exists in the Saxum Picker 3.2.10 component for Joomla! via the publicid parameter. (no CVSS)
- [CVE-2018-7179](https://cve.now/CVE-2018-7179.md): SQL Injection exists in the SquadManagement 1.0.3 component for Joomla! via the id parameter. (no CVSS)
- [CVE-2018-7180](https://cve.now/CVE-2018-7180.md): SQL Injection exists in the Saxum Astro 4.0.14 component for Joomla! via the publicid parameter. (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2018-02-17
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.