← All advisories

Critical severity9.8NVD Advisory· Published Sep 28, 2018· Updated Jun 17, 2026

CVE-2018-17376

CVE-2018-17376

Description

SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filter_order_Dir, cat, or filter_letter parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/Reverse Auction Factoryinferred
Range: <=4.3.8
Package: https://wordpress.org/plugins/reverse-auction-factory
Joomla/Reverse Auction Factoryllm-create
Range: =4.3.8

Patches

Vulnerability mechanics

References

2

packetstormsecurity.com/files/149531/Joomla-Reverse-Auction-Factory-4.3.8-SQL-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/45475/nvdExploitThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.