What’s Vulnerable › Vulnerabilities

CVE-2018-17380

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-09-28 · updated 2026-06-17
• Weakness: CWE-89

Description

SQL Injection exists in the Article Factory Manager 4.3.9 component for Joomla! via the start_date, m_start_date, or m_end_date parameter.

Affected products

• Thephpfactory Article Factory Manager: 4.3.9

References

• http://packetstormsecurity.com/files/149533/Joomla-Article-Factory-Manager-4.3.9-SQL-Injection.html
• https://www.exploit-db.com/exploits/45477/
• http://packetstormsecurity.com/files/149533/Joomla-Article-Factory-Manager-4.3.9-SQL-Injection.html
• https://www.exploit-db.com/exploits/45477/

Get alerted when CVE-2018-17380 or the next vulnerability affects your stack