Neojoomla

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Neojoomla records in CISA KEV

No Neojoomla vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Neorecruit · all components

TI-2018-04690 CVE-2018-6370 · GHSA-qv8v-wr87-ccm8

MEDIUM 47

SQL Injection exists in the NeoRecruit 4.1 component for Joomla! via the (1) PATH_INFO or (2) name of a .html file under the all-offers/ URI.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02652 Published 2018-02-17 No fix listed CWE-89