Skip to content

CVE-2018-5989 SQL Injection exists in the ccNewsletter 2.x component for Joomla! via the id parameter in a task=removeSubscriber action, a related issue to CVE-2011-5099.

CriticalCVSS 9.8 EPSS 2.6% Public exploit
Published
Updated
Exploit status
Public exploit available
Sign in for asset impact Search another CVE

Description

SQL Injection exists in the ccNewsletter 2.x component for Joomla! via the id parameter in a task=removeSubscriber action, a related issue to CVE-2011-5099.

Affected products

ProductAffected versionsFixed in
chillcreations ccnewsletter >= 2.0.0, <= 2.2.4 No fix listed

References

  • 44132 exploit third-party-advisory vdb-entry