CVE-2018-7319 – Joomla! Component OS Property Real Estate 3.12.7 - SQL Injection

https://notcve.org/view.php?id=CVE-2018-7319

SQL Injection exists in the OS Property Real Estate 3.12.7 component for Joomla! via the cooling_system1, heating_system1, or laundry parameter. Existe inyección SQL en el componente OS Property Real Estate 3.12.7 para Joomla! mediante los parámetros cooling_system1, heating_system1 o laundry. Joomla! • https://www.exploit-db.com/exploits/44165 https://exploit-db.com/exploits/44165 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •