Thephpfactory

11 CVEs across 11 Thephpfactory products. Browse Thephpfactory vulnerabilities, severities, and proof-of-concept exploits.

Thephpfactory products with known CVEs

ProductCVEs
Article Factory Manager1
Auction Factory1
Collection Factory1
Dutch Auction Factory1
Jobs Factory1
Micro Deal Factory1
Penny Auction Factory1
Raffle Factory1
Reverse Auction Factory1
Social Factory1
Swap Factory1
Thephpfactory CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2018-17386Critical9.82019-06-19SQL Injection exists in the Micro Deal Factory 2.4.0 component for Joomla! via the id parameter, or the PATH_INFO to mydeals/ or listdeals/.
CVE-2018-17381Critical9.82019-06-19SQL Injection exists in the Dutch Auction Factory 2.0.2 component for Joomla! via the filter_order_Dir or filter_order parameter.
CVE-2018-17374Critical9.82019-06-19SQL Injection exists in the Auction Factory 4.5.5 component for Joomla! via the filter_order_Dir or filter_order parameter.
CVE-2018-17385Critical9.82018-09-28SQL Injection exists in the Social Factory 3.8.3 component for Joomla! via the radius[lat], radius[lng], or radius[radius] parameter.
CVE-2018-17384Critical9.82018-09-28SQL Injection exists in the Swap Factory 2.2.1 component for Joomla! via the filter_order_Dir or filter_order parameter.
CVE-2018-17383Critical9.82018-09-28SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filter_order or filter_order_Dir parameter.
CVE-2018-17382Critical9.82018-09-28SQL Injection exists in the Jobs Factory 2.0.4 component for Joomla! via the filter_letter parameter.
CVE-2018-17380Critical9.82018-09-28SQL Injection exists in the Article Factory Manager 4.3.9 component for Joomla! via the start_date, m_start_date, or m_end_date parameter.
CVE-2018-17379Critical9.82018-09-28SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filter_order_Dir or filter_order parameter.
CVE-2018-17378Critical9.82018-09-28SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filter_order_Dir or filter_order parameter.
CVE-2018-17376Critical9.82018-09-28SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filter_order_Dir, cat, or filter_letter parameter.