Skip to content

CVE-2018-5992 SQL Injection exists in the Staff Master through 1.0 RC 1 component for Joomla! via the name parameter in a view=staff request.

CriticalCVSS 9.8 EPSS 2.7%
Published
Updated
Exploit status
No public exploit known

Description

SQL Injection exists in the Staff Master through 1.0 RC 1 component for Joomla! via the name parameter in a view=staff request.

Affected products

ProductAffected versionsFixed in
staff master project staff master <= 1.0 No fix listed
staff master project staff master = 1.0-rc1 No fix listed

References

  • 44129 exploit third-party-advisory vdb-entry