Vendors / Dthdevelopment Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 2 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Dthdevelopment records in CISA KEV No Dthdevelopment vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 49
SQL Injection exists in the DT Register 3.2.7 component for Joomla! via a task=edit&id= request.
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.038 · Published 2018-02-17 · No fix listed CWE-89
Priority MEDIUM 46
Joomla extension DT Register version before 3.1.12 (Joomla 3.x) / 2.8.18 (Joomla 2.5) contains an SQL injection in "/index.php?controller=calendar&format=raw&cat[0]=SQLi&task=events".
CVSS 3.0 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01973 · Published 2019-02-04 · No fix listed CWE-89
Open these records in search → All records by CVSS severity
Critical2 High0 Medium0 Low0 No CVSS0