Skip to content

CVE-2018-6370 SQL Injection exists in the NeoRecruit 4.1 component for Joomla! via the (1) PATH_INFO or (2) name of a .html file under the all-offers/ URI.

CriticalCVSS 9.8 EPSS 2.7%
Published
Updated
Exploit status
No public exploit known

Description

SQL Injection exists in the NeoRecruit 4.1 component for Joomla! via the (1) PATH_INFO or (2) name of a .html file under the all-offers/ URI.

Affected products

ProductAffected versionsFixed in
neojoomla neorecruit = 4.1 No fix listed

References

  • 44123 exploit third-party-advisory vdb-entry