← All advisories

Critical severity9.8NVD Advisory· Published Sep 28, 2018· Updated Jun 17, 2026

CVE-2018-17378

CVE-2018-17378

Description

SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filter_order_Dir or filter_order parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/Penny Auction Factoryinferred2 versions
<=2.0.4+ 1 more
- (no CPE)range: <=2.0.4
- (no CPE)range: <=2.0.4
Package: https://wordpress.org/plugins/penny-auction-factory

Patches

Vulnerability mechanics

References

2

packetstormsecurity.com/files/149522/Joomla-Penny-Auction-Factory-2.0.4-SQL-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
www.exploit-db.com/exploits/45466/nvdExploitThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.