CVE-2019-9184

概要

参考情報

• andreiconache.me/j2store-plugin-3-3-6-sql-injection · Third Party Advisory
• exploit-db.com/exploits/46467 · Exploit
• j2store.org/blog/general/security-update-for-j2store.html · Patch

j2store のその他の脆弱性

• CVE-2020-13996高 8.8The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager.
• CVE-2015-6513高 7.5Multiple SQL injection vulnerabilities in the J2Store (com_j2store) extension before 3.1.7 for Joomla! allow remote attackers to execute arb…