Description
Joomla! 组件Reverse Auction Factory 4.3.8版本filter_order_Dir参数存在SQL注入漏洞，攻击者可以利用此漏洞获取数据库敏感信息。
Joomla Reverse Auction Factory 组件存在SQL注入漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.exploit-db.com/exploits/45475
https://qkl.seebug.org/vuldb/ssvid-97623
https://www.cve.org/CVERecord?id=CVE-2018-17376
https://www.thesmartscanner.com/vulnerability-list/joomla-component-reverse-auction-factory-4-3-8-sqli
https://osv.dev/vulnerability/CVE-2018-17376
https://cve.reconshell.com/cve?vendor=thephpfactory&product=reverse_auction_factory