Skip to content

CVE-2017-15965 The NS Download Shop (aka com_ns_downloadshop) component 2.2.6 for Joomla! allows SQL Injection via the id parameter in an invoice.create action.

CriticalCVSS 9.8 EPSS 3.4%
Published
Updated
Exploit status
No public exploit known
Sign in for asset impact Search another CVE

Description

The NS Download Shop (aka com_ns_downloadshop) component 2.2.6 for Joomla! allows SQL Injection via the id parameter in an invoice.create action.

Affected products

ProductAffected versionsFixed in
nswd ns download shop = 2.2.6 No fix listed

References

  • 101624 third-party-advisory vdb-entry
  • packetstormsecurity.com exploit issue-tracking third-party-advisory vdb-entry
  • 43094 exploit issue-tracking third-party-advisory vdb-entry