VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

Severity

CritiqueÉlevéeMoyenneFaibleExploited in the wild (KEV)

Language / ecosystem

JavaScript / TypeScript (npm)Python (PyPI)PHP (Packagist)Java / Kotlin (Maven)GoRuby (RubyGems).NET (NuGet)

Stack

JavaScript / Node.js

Next.jsNuxtReactAngularSvelte / SvelteKitAstroRemixViteExpressNestJSFastifyNode.jsaxios

PHP

LaravelSymfonyPHP

Python

DjangoFlaskFastAPI / Starlette

Ruby

Ruby on Rails

Java

Spring

GinFiber

CMS

WordPressWooCommerceDrupalGhostStrapi

Servers & databases

nginxApache HTTP ServerMySQLPostgreSQLRedis

Vendor1

thephpfactoryoracleibmgoogleadobemicrosoftmozillaciscoapacheappleredhatjenkinshpAll vendors →

thephpfactory products

article factory manager 1auction factory 1collection factory 1dutch auction factory 1jobs factory 1micro deal factory 1penny auction factory 1raffle factory 1reverse auction factory 1social factory 1swap factory 1

403 593 vulnerabilities · 1 767 actively exploited (CISA KEV)

thephpfactory ✕Clear filters

11 results

ID	Severity	Summary	Published
CVE-2018-17386	CRITIQUE9.8	SQL Injection exists in the Micro Deal Factory 2.4.0 component for Joomla! via the id parameter, or the PATH_INFO to mydeals/ or listdeals/.	19/06/2019
CVE-2018-17381	CRITIQUE9.8	SQL Injection exists in the Dutch Auction Factory 2.0.2 component for Joomla! via the filter_order_Dir or filter_order parameter.	19/06/2019
CVE-2018-17374	CRITIQUE9.8	SQL Injection exists in the Auction Factory 4.5.5 component for Joomla! via the filter_order_Dir or filter_order parameter.	19/06/2019
CVE-2018-17385	CRITIQUE9.8	SQL Injection exists in the Social Factory 3.8.3 component for Joomla! via the radius[lat], radius[lng], or radius[radius] parameter.