EDB-44111

functional

Joomla! Component Form Maker 3.6.12 - SQL Injection

view exploit source exploit_dbverifiedtype webappsauthor Ihsan Sencanpublished 2018-02-16catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2018-5991UScritical9.8Exploit
SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats request, a different vulnerability than CVE-2015-2798.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan