CVE-2018-6024

SQL Injection exists in the Project Log 1.5.3 component for Joomla! via the search parameter.

• CWE-89

• http://packetstormsecurity.com/files/146454/Joomla-Project-Log-1.5.3-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/44124/Exploit, Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/146454/Joomla-Project-Log-1.5.3-SQL-Injection.htmlExploit, Third Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/44124/Exploit, Third Party Advisory, VDB Entry

Published

Feb 18, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-6018Fixed sizes of HTTPS responses in Tinder iOS app and Tinder …
• CVE-2018-6019Samsung Display Solutions App before 3.02 for Android allows…
• CVE-2018-6020In Silex SX-500 all versions and GE MobileLink(GEH-500) vers…
• CVE-2018-6021Silex SD-320AN version 2.01 and prior and GE MobileLink(GEH-…
• CVE-2018-6022Directory traversal vulnerability in application/admin/contr…
• CVE-2018-6023Fastweb FASTgate 0.00.47 devices are vulnerable to CSRF, wit…
• CVE-2018-6029The copy function in application/admin/controller/Article.ph…
• CVE-2018-6031Use after free in PDFium in Google Chrome prior to 64.0.3282…
• CVE-2018-6032Insufficient policy enforcement in Blink in Google Chrome pr…
• CVE-2018-6033Insufficient data validation in Downloads in Google Chrome p…
• CVE-2018-6034Insufficient data validation in WebGL in Google Chrome prior…
• CVE-2018-6035Insufficient policy enforcement in DevTools in Google Chrome…