CVE-2015-7342 JNews Joomla Component before 8.5.0 allows SQL injection via upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field.
HighCVSS 7.2
EPSS 0.98%
- Published
- Updated
- Exploit status
- No public exploit known
Description
JNews Joomla Component before 8.5.0 allows SQL injection via upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| joobi jnews | < 8.5.0 | 8.5.0 |
References
- labs.integrity.pt exploit third-party-advisory