CVE-2018-17378
SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filter_order_Dir or filter_order parameter.
CVSS 3.0 · 9.8 Critical
EPSS 3.3%
KEV · Not listed
Vendors
Products