CYBERHAWK / CVE / CVE-2018-25433
CVE-2018-25433
Joomla JE Photo Gallery
HIGH
CVSS 8.2
vibe
The flaw
SQL injection vulnerability allows unauthenticated attackers to extract database information through the categoryid parameter.
What to do
Update to version newer than 1.1 or sanitize categoryid parameter