漏洞描述
Joomla! 组件Reverse Auction Factory 4.3.8版本filter_order_Dir参数存在SQL注入漏洞，攻击者可以利用此漏洞获取数据库敏感信息。
Joomla Reverse Auction Factory 组件存在SQL注入漏洞
PoC代码
暂无相关漏洞推荐
- Wordpress Plugin Ultimate Auction Pro /wp-admin/admin-ajax.php uwa_see_more_bids_ajax SQL 注入漏洞 （CVE-2025-4204）
- CNVD-2019-34135: Joomla configuration.php RCE
- 金蝶天燕 /ormrpc/services/ServiceFactoryService 命令执行漏洞
- POC CVE-2007-4504: Joomla! RSfiles <=1.0.2 - Local File Inclusion
- POC CVE-2008-4668: Joomla! Image Browser 0.1.5 rc2 - Local File Inclusion
- POC CVE-2008-4764: Joomla! <=2.0.0 RC2 - Local File Inclusion
- POC CVE-2008-6080: Joomla! ionFiles 4.4.2 - Local File Inclusion
- POC CVE-2008-6172: Joomla! Component RWCards 3.0.11 - Local File Inclusion
- POC CVE-2008-6222: Joomla! ProDesk 1.0/1.2 - Local File Inclusion
- POC CVE-2009-1496: Joomla! Cmimarketplace 0.1 - Local File Inclusion
- POC CVE-2009-2015: Joomla! MooFAQ 1.0 - Local File Inclusion
- POC CVE-2009-2100: Joomla! JoomlaPraise Projectfork 2.0.10 - Local File Inclusion
- POC CVE-2009-3053: Joomla! Agora 3.0.0b - Local File Inclusion