CVE-2018-12254

router.php in the Harmis Ek rishta (aka ek-rishta) 2.10 component for Joomla! allows SQL Injection via the PATH_INFO to a home/requested_user/Sent%20interest/ URI.

• CWE-89

• https://m4k4br0.github.io/sql-injection-joomla-component/Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/44893/Exploit, Third Party Advisory, VDB Entry
• https://m4k4br0.github.io/sql-injection-joomla-component/Exploit, Third Party Advisory
• https://www.exploit-db.com/exploits/44893/Exploit, Third Party Advisory, VDB Entry

Published

Jun 12, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12246Symantec Web Isolation (WI) 1.11 prior to 1.11.21 is suscept…
• CVE-2018-12247An issue was discovered in mruby 1.4.1. There is a NULL poin…
• CVE-2018-12248An issue was discovered in mruby 1.4.1. There is a heap-base…
• CVE-2018-12249An issue was discovered in mruby 1.4.1. There is a NULL poin…7.5
• CVE-2018-1225Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2018-12250An issue was discovered in Elite CMS Pro 2.01. In /admin/add…
• CVE-2018-12255An XSS issue was discovered in InvoicePlane 1.5.10 via the "…
• CVE-2018-12256admin/vqmods.app/vqmods.inc.php in LiteCart before 2.1.3 all…
• CVE-2018-12257An issue was discovered on Momentum Axel 720P 5.1.8 devices.…
• CVE-2018-12258An issue was discovered on Momentum Axel 720P 5.1.8 devices.…
• CVE-2018-12259An issue was discovered on Momentum Axel 720P 5.1.8 devices.…
• CVE-2018-1226Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…