CVE-2018-7318: SQL Injection
First published: Thu Feb 22 2018(Updated: )
SQL Injection exists in the CheckList 1.1.1 component for Joomla! via the title_search, tag_search, name_search, description_search, or filter_order parameter.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Belitsoft Checklist | =1.1.1 | |
| Oracle Data Integrator | =11.1.1.9.0 | |
| Oracle Data Integrator | =12.2.1.3.0 | |
| Oracle Data Integrator | =12.2.1.4.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is SQL Injection?
SQL Injection is a code injection technique that allows an attacker to insert malicious SQL statements into an application's database query.
What is the vulnerability ID for the SQL Injection in CheckList 1.1.1 component for Joomla!?
The vulnerability ID for the SQL Injection in CheckList 1.1.1 component for Joomla! is CVE-2018-7318.
What is the severity level of CVE-2018-7318?
The severity level of CVE-2018-7318 is critical.
How does the SQL Injection in CheckList 1.1.1 component for Joomla! work?
The SQL Injection in CheckList 1.1.1 component for Joomla! occurs when the title_search, tag_search, name_search, description_search, or filter_order parameter is not properly sanitized, allowing an attacker to manipulate the SQL query and potentially execute malicious code.
How can I fix the SQL Injection vulnerability in CheckList 1.1.1 component for Joomla!?
To fix the SQL Injection vulnerability in CheckList 1.1.1 component for Joomla!, you should update to the latest version of the component and sanitize user input before using it in SQL queries.
- collector/nvd-index
- agent/references
- agent/weakness
- agent/tags
- agent/severity
- agent/author
- agent/description
- agent/type
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- collector/mitre-cve
- source/MITRE
- vendor/belitsoft
- canonical/belitsoft checklist
- version/belitsoft checklist/1.1.1
- vendor/oracle
- canonical/oracle data integrator
- version/oracle data integrator/11.1.1.9.0
- version/oracle data integrator/12.2.1.3.0
- version/oracle data integrator/12.2.1.4.0