Skip to content

CVE-2018-6372 SQL Injection exists in the JB Bus 2.3 component for Joomla! via the order_number parameter.

CriticalCVSS 9.8 EPSS 2.7% Public exploit
Published
Updated
Exploit status
Public exploit available

Description

SQL Injection exists in the JB Bus 2.3 component for Joomla! via the order_number parameter.

Affected products

ProductAffected versionsFixed in
joombooking jb bus = 2.3 No fix listed

References

  • 44115 exploit third-party-advisory vdb-entry