CVE-2018-6394

SQL Injection exists in the InviteX 3.0.5 component for Joomla! via the invite_type parameter in a view=invites action.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-02-17

Last modified

2024-08-05

Weaknesses

CWE-89

Affected products

• Invitex (Techjoomla)

References

• https://exploit-db.com/exploits/44114