CVE-2018-7314
published 2018-02-22CVE-2018-7314: SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla! via the sessionid parameter, a different vulnerability than CVE-2008-6429.
PriorityP183critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
ITWEXPLOITVulnCheck KEV
Exploited in the wild
EPSS
59.55%
99.0th percentile
SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla! via the sessionid parameter, a different vulnerability than CVE-2008-6429.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| mlwebtechnologies | prayercenter | — | — |
Detection & IOCsextracted from sources · hover to see the quote
url/index.php?option=com_prayercenter&task=confirm&id=1&sessionid=1' AND EXTRACTVALUE(22,CONCAT(0x7e,md5({{num}})))-- X↗
command1' AND EXTRACTVALUE(22,CONCAT(0x5c,(SELECT GROUP_CONCAT(table_name SEPARATOR 0x3c62723e) FROM INFORMATION_SCHEMA.TABLES WHERE TABLE_SCHEMA=DATABASE()),(SELECT (ELT(1=1,1))),database()))-- VerAyari↗
- →Detect exploitation attempts by monitoring GET requests to index.php containing the 'com_prayercenter' component option combined with the 'sessionid' parameter carrying SQL injection payloads (e.g., EXTRACTVALUE, CONCAT, single-quote). ↗
- →The nuclei template matches exploitation success by detecting the MD5 hash output of a random integer in the HTTP response body, confirming error-based SQL injection via EXTRACTVALUE. ↗
- →The attack uses the URL parameter pattern: option=com_prayercenter&task=confirm&id=1&sessionid= with SQL injection appended; alert on this query string combination in web server logs or WAF rules. ↗
- ·The nuclei template uses a randomized integer (rand_int 800000000–1000000000) and its MD5 as the match condition, meaning detection is probabilistic per request; static signatures must account for the variable payload. ↗
- ·This is a distinct vulnerability from CVE-2008-6429, which also affected PrayerCenter via the sessionid parameter; ensure detection rules differentiate between the two CVEs if both are in scope. ↗
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv9.8CRITICAL
vulncheck7.5HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-7fgr-rxh7-75r8: SQL Injection exists in the PrayerCenter 3
ghsa_unreviewed·2022-05-14·CVSS 7.5
CVE-2018-7314 [HIGH] CWE-89 GHSA-7fgr-rxh7-75r8: SQL Injection exists in the PrayerCenter 3
SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla! via the sessionid parameter, a different vulnerability than CVE-2008-6429.
OSV
liblivemedia vulnerabilities
osv·2021-03-15·CVSS 9.8
CVE-2018-4013 liblivemedia vulnerabilities
liblivemedia vulnerabilities
It was discovered that liveMedia incorrectly handled certain network
packets. An attacker could possibly use this issue to execute arbitrary
code. (CVE-2018-4013)
It was discovered that liveMedia incorrectly handled certain network
sessions. An attacker could possibly use this issue to cause a denial of
service. (CVE-2019-6256)
It was discovered that liveMedia incorrectly handled certain RTSP
streamings. An attacker could possiby use this issue to cause a denial of
service or other unspecified impact. (CVE-2019-7314)
It was discovered that liveMedia incorrectly handled certain requests. An
attacker could possibly use this issue to obtain sensitive information.
(CVE-2019-9215)
VulnCheck
mlwebtechnologies prayercenter Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
vulncheck·2018·CVSS 7.5
CVE-2018-7314 [HIGH] mlwebtechnologies prayercenter Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
mlwebtechnologies prayercenter Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla! via the sessionid parameter, a different vulnerability than CVE-2008-6429.
Affected: mlwebtechnologies prayercenter
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Exploitation References: https://unit42.paloaltonetworks.com/network-attack-trends-winter-2020/
No detection rules found.
Exploit-DB
Joomla! Component PrayerCenter 3.0.2 - 'sessionid' SQL Injection
exploitdb·2018-02-22·CVSS 9.8
CVE-2018-7314 [CRITICAL] Joomla! Component PrayerCenter 3.0.2 - 'sessionid' SQL Injection
Joomla! Component PrayerCenter 3.0.2 - 'sessionid' SQL Injection
---
# # # #
# Exploit Title: Joomla! Component PrayerCenter 3.0.2 - SQL Injection
# Dork: N/A
# Date: 22.02.2018
# Vendor Homepage: http://www.mlwebtechnologies.com/
# Software Link: https://extensions.joomla.org/extensions/extension/living/religion/prayercenter/
# Software Download: http://mlwebtechnologies.github.io/PrayerCenter/
# Software Download: https://github.com/MLWebTechnologies/PrayerCenter/releases/download/3.0.2/PrayerCenter302Unzip1st.zip
# Version: 3.0.2
# Category: Webapps
# Tested on: WiN7_x64/KaLiLinuX_x64
# CVE: CVE-2018-7314
# # # #
# Exploit Author: Ihsan Sencan
# # # #
#
# POC:
#
# 1)
# http://localhost/[PATH]/index.php?option=com_prayercenter&task=confirm&id=1&sessionid=[SQL]
#
# %31%27%20%41%4e%44%20
Nuclei
Joomla! Component PrayerCenter 3.0.2 - SQL Injection
nuclei·CVSS 7.5
CVE-2018-7314 [HIGH] Joomla! Component PrayerCenter 3.0.2 - SQL Injection
Joomla! Component PrayerCenter 3.0.2 - SQL Injection
SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla! via the sessionid parameter, a different vulnerability than CVE-2008-6429.
Template:
id: CVE-2018-7314
info:
name: Joomla! Component PrayerCenter 3.0.2 - SQL Injection
author: DhiyaneshDK
severity: critical
description: |
SQL Injection exists in the PrayerCenter 3.0.2 component for Joomla! via the sessionid parameter, a different vulnerability than CVE-2008-6429.
impact: |
Unauthenticated attackers can execute arbitrary SQL commands to access, modify, or delete database contents, potentially compromising the entire Joomla installation.
remediation: |
Remove the vulnerable PrayerCenter component or upgrade to a patched version.
reference:
- https://www.exploit-db.com
Unit42
Network Attack Trends: Internet of Threats (November 2020-January 2021)
blogs_unit42·2021-04-12·CVSS 7.5
CVE-2020-28188 [HIGH] Network Attack Trends: Internet of Threats (November 2020-January 2021)
# Executive Summary
Unit 42 researchers analyzed network attack trends over Winter 2020 and discovered many interesting exploits in the wild. During the period of Nov. 2020 to Jan. 2021, the majority of the attacks we observed were classified as critical (75%), compared to the 50.4% we reported in the fall of 2020. Several newly observed exploits, including CVE-2020-28188, CVE-2020-17519, and CVE-2020-29227, have emerged and were continuously being exploited in the wild as of late 2020 to early 2021.
This blog provides details of the newly observed exploits as well as a dive deep into the exploitation analysis, vendor analysis, attack origin, and attack category distribution.
Palo Alto Networks Next-Generation Firewall customers are protected from these attacks with the URL Filtering an
Unit42
Network Attack Trends: Internet of Threats (November 2020-January 2021)
blogs_unit42·2021-04-12·CVSS 7.5
[HIGH] Network Attack Trends: Internet of Threats (November 2020-January 2021)
Threat Research Center
Trend Reports
Vulnerabilities
## Network Attack Trends: Internet of Threats (November 2020-January 2021)
Lei Xu
Yue Guan
Vaibhav Singhal
Published: April 12, 2021
Malware
Trend Reports
Vulnerabilities
Botnet
DDoS
Exploit kit
IoT
Network security trends
## Executive Summary
Unit 42 researchers analyzed network attack trends over Winter 2020 and discovered many interesting exploits in the wild. During the period of Nov. 2020 to Jan. 2021, the majority of the attacks we observed were classified as critical (75%), compared to the 50.4% we reported in the fall of 2020 . Several newly observed exploits, including CVE-2020-28188 , CVE-2020-17519 , and CVE-2020-29227 , have emerged and were continuously being exploited in the wild as of late 2020 to earl
Greynoiseio
NoiseLetter September 2025
blogs_greynoiseio
NoiseLetter September 2025
CVE Disclosure Early Warning Get an early warning when traffic spikes indicate a high likelihood of new disclosures
Compromised Asset Detection Find out immediately if an asset communicates with a malicious IP address
Vulnerability Prioritization Get real-time insight into active exploitation trends to better understand risk and severity
SOC Efficiency Filter out noisy, low priority and false-positive alerts from mass internet scanners
Incident Investigation Add context to incidents to speed the determinations of scope and timelines
Threat Hunting Quickly identify anomalous behavior and enrich your threat hunting campaigns
Why GreyNoise
CVE Disclosure Early Warning Get an early warning when traffic spikes indicate a high likelihood of new disclosures
Compromised Asset Detection Fin
2018-02-22
Published
Exploited in the wild