SQL Injection exists in the Auction Factory 4.5.5 component for Joomla! via the filter_order_Dir or filter_order parameter.

Published Jun 19, 2019 · Updated Aug 5, 2024 · Assigned by mitre