CVE-2018-5991

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2018-02-17 · updated 2026-06-17
Weakness: CWE-89

Description

SQL Injection exists in the Form Maker 3.6.12 component for Joomla! via the id, from, or to parameter in a view=stats request, a different vulnerability than CVE-2015-2798.

Affected products

Web-Dorado Form Maker: 3.6.12

References

https://exploit-db.com/exploits/44111
https://exploit-db.com/exploits/44111

Get alerted when CVE-2018-5991 or the next vulnerability affects your stack