CVE-2018-6370

published 2018-02-17

CVE-2018-6370: SQL Injection exists in the NeoRecruit 4.1 component for Joomla! via the (1) PATH_INFO or (2) name of a .html file under the all-offers/ URI.

Priority P2 61 critical 9.8 CVSS 3.0

AV N AC L PR N UI N S U C H I H A H

EXPLOIT

SQL Injection exists in the NeoRecruit 4.1 component for Joomla! via the (1) PATH_INFO or (2) name of a .html file under the all-offers/ URI.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
neojoomla	neorecruit	—	—

Detection & IOCs extracted from sources · hover to see the quote

url http://localhost/[PATH]/neorecruit/all-offers/xxx[SQL].html↗

url http://localhost/[PATH]/neorecruit/xxx/xxx[SQL]↗

command 'and (select 1 from (select count(*),concat((select(select concat(cast(database() as char),0x7e)) from information_schema.tables where table_schema=database() limit 0,1),floor(rand(0)*2))x from information_schema.tables group by x)a) AND ''='↗

• → SQL injection is triggered via the PATH_INFO or the filename of a .html file under the all-offers/ URI path in the NeoRecruit 4.1 Joomla component. Monitor HTTP requests to paths matching /neorecruit/all-offers/*.html or /neorecruit/*/* containing SQL metacharacters. ↗

• · The exploit PoC uses placeholder values ([PATH], xxx) for the Joomla installation path and offer identifiers; actual attack URLs will vary per target deployment. ↗

CVSS provenance

nvd v3.0 9.8 CRITICAL CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-89