CVE-2018-5971 – Joomla! Component MediaLibrary Free 4.0.12 - SQL Injection

https://notcve.org/view.php?id=CVE-2018-5971

17 Feb 2018 — SQL Injection exists in the MediaLibrary Free 4.0.12 component for Joomla! via the id parameter or the mid array parameter. Existe inyección SQL en el componente MediaLibrary Free 4.0.12 para Joomla! mediante el parámetro id o el parámetro mid array. Joomla! • https://packetstorm.news/files/id/146452 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •