cbcvebase.
CVE-2018-5970
published 2018-02-17

CVE-2018-5970: SQL Injection exists in the JGive 2.0.9 component for Joomla! via the filter_org_ind_type or campaign_countries parameter.

PriorityP265critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EXPLOIT
EPSS
2.70%
84.1th percentile
SQL Injection exists in the JGive 2.0.9 component for Joomla! via the filter_org_ind_type or campaign_countries parameter.

Affected

1 ranges
VendorProductVersion rangeFixed in
techjoomlajgive——

Detection & IOCsextracted from sources · hover to see the quote

urlhttp://localhost/[PATH]/index.php?option=com_jgive&view=campaigns&layout=all&filter_org_ind_type=[SQL]↗
urlhttp://localhost/[PATH]/index.php/more/campaigns-in-pin-display/campaigns/all/search/:?campaign_countries=[SQL]↗
otheroption=com_jgive↗
  • →Monitor HTTP requests to Joomla! endpoints containing the 'com_jgive' component option with user-supplied input in the 'filter_org_ind_type' query parameter, which is directly injectable with SQL payloads. ↗
  • →Monitor HTTP requests to the SEF URL path '/index.php/more/campaigns-in-pin-display/campaigns/all/search/' with user-supplied input in the 'campaign_countries' parameter for SQL injection attempts. ↗
  • →SQL injection in JGive 2.0.9 affects two parameters: 'filter_org_ind_type' and 'campaign_countries'. Alert on SQL metacharacters or keywords (e.g., EXTRACTVALUE, CONCAT, SELECT) appearing in either parameter in web logs. ↗
  • ·The exploit PoC payloads are Base64-encoded in the source; the actual SQL injection strings must be decoded before use in signatures or WAF rules. ↗
  • ·The vulnerability is confirmed only against JGive version 2.0.9; other versions are not explicitly stated as affected. ↗

CVSS provenance

nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.