CVE Vulnerability

CWE-89

CVE-2018-17386

by

SQL Injection exists in the Micro Deal Factory 2.4.0 component for Joomla! via the id parameter, or the PATH_INFO to mydeals/ or listdeals/.

CVE-2018-17388

by

SQL Injection exists in Twilio WEB To Fax Machine System 1.0 via the email or password parameter to login_check.php, or the id parameter to add_email.php or edit_content.php.

CVE-2018-17391

by

SQL Injection exists in authors_post.php in Super Cms Blog Pro 1.0 via the author parameter.

CVE-2018-17393

by

SQL Injection exists in HealthNode Hospital Management System 1.0 via the id parameter to dashboard/Patient/info.php or dashboard/Patient/patientdetails.php.

CVE-2018-17394

by

SQL Injection exists in the Timetable Schedule 3.6.8 component for Joomla! via the eid parameter.

CVE-2018-17397

by

SQL Injection exists in the AlphaIndex Dictionaries 1.0 component for Joomla! via the letter parameter.