CVE-2018-14592

published 2018-09-20

CVE-2018-14592: The CWJoomla CW Article Attachments PRO extension before 2.0.7 and CW Article Attachments FREE extension before 1.0.6 for Joomla! allow SQL Injection within…

Priority P2 61 critical 9.8 CVSS 3.0

AV N AC L PR N UI N S U C H I H A H

EXPLOIT

The CWJoomla CW Article Attachments PRO extension before 2.0.7 and CW Article Attachments FREE extension before 1.0.6 for Joomla! allow SQL Injection within download.php.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
cwjoomla	cw_article_attachments_free	< 1.0.6	1.0.6
cwjoomla	cw_article_attachments_pro	< 2.0.7	2.0.7

Detection & IOCs extracted from sources · hover to see the quote

url http://IP-ADDRESS/plugins/content/cwattachments/cwattachments/helpers/download.php?id=INJECTION&sid=0123456789987654321↗

path /plugins/content/cwattachments/cwattachments/helpers/download.php↗

• → Monitor HTTP requests to download.php within the cwattachments plugin path for SQL injection patterns in the 'id' parameter ↗
• → The 'sid' parameter in exploit PoC uses a fixed value '0123456789987654321' which may appear in attack traffic alongside a malicious 'id' parameter ↗

• · Vulnerable versions are CW Article Attachments FREE below 1.0.6 and PRO below 2.0.7; patched versions are FREE 1.0.6+ and PRO 2.0.7+ ↗

CVSS provenance

nvd v3.0 9.8 CRITICAL CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-89