RULE(RULE ID:323099)

Rule General Information
Release Date: 2019-09-11
Rule Name: Joomla component Questions SQL Injection Vulnerability (CVE-2018-17377)
Severity:
CVE ID:
Rule Protection Details
Description: SQL Injection exists in the Questions 1.4.3 component for Joomla! via the term, userid, users, or groups parameter.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Others
Reference: ExploitDB:45468
http://packetstormsecurity.com/files/149523/Joomla-Questions-1.4.3-SQL-Injection.html
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
https://extensiondeveloper.com/