CVE-2018-5971 – Joomla! Component MediaLibrary Free 4.0.12 - SQL Injection

https://notcve.org/view.php?id=CVE-2018-5971

SQL Injection exists in the MediaLibrary Free 4.0.12 component for Joomla! via the id parameter or the mid array parameter. Existe inyección SQL en el componente MediaLibrary Free 4.0.12 para Joomla! mediante el parámetro id o el parámetro mid array. Joomla! • https://www.exploit-db.com/exploits/44122 https://exploit-db.com/exploits/44122 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •