Thephpfactory

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical11CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Thephpfactory records in CISA KEV

No Thephpfactory vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Article Factory Manager 1 record MEDIUM Auction Factory 1 record MEDIUM Collection Factory 1 record MEDIUM Dutch Auction Factory 1 record MEDIUM Jobs Factory 1 record MEDIUM Micro Deal Factory 1 record MEDIUM Penny Auction Factory 1 record MEDIUM Raffle Factory 1 record MEDIUM

Records

1 record in Auction Factory · all components

TI-2018-12375 CVE-2018-17374 · GHSA-89p4-m4q2-whwq

SQL Injection exists in the Auction Factory 4.5.5 component for Joomla! via the…

MEDIUM 47

SQL Injection exists in the Auction Factory 4.5.5 component for Joomla! via the filter_order_Dir or filter_order parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02338 Published 2019-06-19 No fix listed CWE-89

Open these records in search →