CVE-2018-25067CWE-89

JoomGallery Image Sort default.php sql injection

Medium · published January 6, 2023

CVSS v3.1
5.5
EPSS
1%
Percentile
51.4
In the wild
Unconfirmed
What it is

A vulnerability, which was classified as critical, was found in JoomGallery up to 3.3.3. This affects an unknown part of the file administrator/components/com_joomgallery/views/config/tmpl/default.php of the component Image Sort Handler. The manipulation leads to sql injection. Upgrading to version 3.3.4 is able to address this issue. The identifier of the patch is dc414ee954e849082260f8613e15a1c1e1d354a1. It is recommended to upgrade the affected component. The identifier VDB-217569 was assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00670 · 51.4th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2023-01-06T20:33Z
EPSS history
Timeline
  • 06 JAN 20:33Z
    JoomGallery Image Sort default.php sql injection
    cvelistv5