CVE-2018-17381

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

SQL Injection exists in the Dutch Auction Factory 2.0.2 component for Joomla! via the filter_order_Dir or filter_order parameter.

Metrics

CVSS 3.0 9.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jun 19, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-173829.8SQL Injection exists in the Jobs Factory 2.0.4 component for Joomla! via the filter_letter parameter.CVE-2018-173839.8SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filter_order or filter_order_Dir parameter.CVE-2018-173849.8SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filter_order_Dir or filter_order parameter.CVE-2018-173859.8SQL Injection exists in the Social Factory 3.8.3 component for Joomla! via the radius[lat], radius[lng], or radius[radius] parameter.CVE-2018-173869.8SQL Injection exists in the Micro Deal Factory 2.4.0 component for Joomla! via the id parameter, or the PATH_INFO to mydeals/ or listdeals/.CVE-2018-173878.8CSRF exists in Nimble Messaging Bulk SMS Marketing Application 1.0 for adding an admin account.CVE-2018-173889.8SQL Injection exists in Twilio WEB To Fax Machine System 1.0 via the email or password parameter to login_check.php, or the id parameter to CVE-2018-173898.8CSRF exists in server.php in Live Call Support Application 1.5 for adding an admin account.CVE-2018-173919.8SQL Injection exists in authors_post.php in Super Cms Blog Pro 1.0 via the author parameter.CVE-2018-173939.8SQL Injection exists in HealthNode Hospital Management System 1.0 via the id parameter to dashboard/Patient/info.php or dashboard/Patient/paCVE-2018-173949.8SQL Injection exists in the Timetable Schedule 3.6.8 component for Joomla! via the eid parameter.CVE-2018-173979.8SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter.
CVE-2018-17381: Critical severity, CVSS 9.8 | Vulnix