cvedb.io
CVE-2018-12254
HIGH · CVSS 8.8
EPSS exploitation probability: 0%
Published 2018-06-12T17:29:00.457 · Last modified 2026-06-17T01:37:25.937

Summary

router.php in the Harmis Ek rishta (aka ek-rishta) 2.10 component for Joomla! allows SQL Injection via the PATH_INFO to a home/requested_user/Sent%20interest/ URI.

Affected products

harmistechnology — ek_rishta

Does this affect you?

Add your gear to cvedb and we'll alert you only when harmistechnology ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.