Thephpfactory

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical11CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Thephpfactory records in CISA KEV

No Thephpfactory vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Article Factory Manager 1 record MEDIUM Auction Factory 1 record MEDIUM Collection Factory 1 record MEDIUM Dutch Auction Factory 1 record MEDIUM Jobs Factory 1 record MEDIUM Micro Deal Factory 1 record MEDIUM Penny Auction Factory 1 record MEDIUM Raffle Factory 1 record MEDIUM

Records

1 record in Collection Factory · all components

TI-2018-12384 CVE-2018-17383 · GHSA-mp9r-qwfc-wf6p

SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the…

MEDIUM 48

SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filter_order or filter_order_Dir parameter.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03213 Published 2018-09-28 No fix listed CWE-89

Open these records in search →