CVE-2018-7319

published 2018-02-22

CVE-2018-7319: SQL Injection exists in the OS Property Real Estate 3.12.7 component for Joomla! via the cooling_system1, heating_system1, or laundry parameter.

Priority P2 63 critical 9.8 CVSS 3.0

AV N AC L PR N UI N S U C H I H A H

EXPLOIT

SQL Injection exists in the OS Property Real Estate 3.12.7 component for Joomla! via the cooling_system1, heating_system1, or laundry parameter.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
os_property_real_estate_project	os_property_real_estate	—	—

Detection & IOCs extracted from sources · hover to see the quote

url http://localhost/[PATH]/os-property-layouts/search-tools/advanced-search?&option=com_osproperty&task=property_advsearch&cooling_system1=[SQL]↗

path /os-property-layouts/search-tools/advanced-search↗

other option=com_osproperty&task=property_advsearch↗

• → Monitor HTTP requests targeting the Joomla component parameter 'option=com_osproperty' with 'task=property_advsearch' for SQL injection payloads in the 'cooling_system1', 'heating_system1', or 'laundry' GET parameters. ↗
• → Flag requests to the path '/os-property-layouts/search-tools/advanced-search' containing SQL metacharacters or injection syntax in the 'cooling_system1', 'heating_system1', or 'laundry' query parameters. ↗

• · The exploit proof-of-concept uses 'localhost' as a placeholder; the actual target path prefix '[PATH]' is variable and must be adapted to the specific Joomla installation directory. ↗

CVSS provenance

nvd v3.0 9.8 CRITICAL CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-89