cve/2018/CVE-2018-17378.md

CVE-2018-17378

Description

SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filter_order_Dir or filter_order parameter.

POC

Reference

• http://packetstormsecurity.com/files/149522/Joomla-Penny-Auction-Factory-2.0.4-SQL-Injection.html
• http://packetstormsecurity.com/files/149522/Joomla-Penny-Auction-Factory-2.0.4-SQL-Injection.html
• https://www.exploit-db.com/exploits/45466/
• https://www.exploit-db.com/exploits/45466/

Github

No PoCs found on GitHub currently.