Records2All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Joomlathat records in CISA KEVNo Joomlathat vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 48
SQL Injection exists in the Music Collection 3.0.3 component for Joomla! via the id parameter.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0328 · Published 2018-09-28 · No fix listed CWE-89
Open these records in search →