CVE-2018-5992

SQL Injection exists in the Staff Master through 1.0 RC 1 component for Joomla! via the name parameter in a view=staff request.
References
Link Resource
https://exploit-db.com/exploits/44129 Exploit Third Party Advisory VDB Entry
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

cpe:2.3:a:staff_master_project:staff_master:*:*:*:*:*:joomla\!:*:*

Configuration 2 (hide)

cpe:2.3:a:staff_master_project:staff_master:1.0:rc1:*:*:*:joomla\!:*:*

Information

Published : 2018-02-16 23:29

Updated : 2018-03-02 07:31


NVD link : CVE-2018-5992

Mitre link : CVE-2018-5992


JSON object : View

CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Advertisement

dedicated server usa

Products Affected

staff_master_project

  • staff_master