CVE-2018-6368

SQL Injection exists in the JomEstate PRO through 3.7 component for Joomla! via the id parameter in a task=detailed action.

• CWE-89

• https://exploit-db.com/exploits/44117Exploit, Third Party Advisory, VDB Entry
• https://exploit-db.com/exploits/44117Exploit, Third Party Advisory, VDB Entry

Published

Feb 17, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-6361Easy Hosting Control Panel (EHCP) v0.37.12.b has XSS via the…
• CVE-2018-6362Easy Hosting Control Panel (EHCP) v0.37.12.b has XSS via the…
• CVE-2018-6363SQL Injection exists in Task Rabbit Clone 1.0 via the single…9.8
• CVE-2018-6364SQL Injection exists in Multilanguage Real Estate MLM Script…
• CVE-2018-6365SQL Injection exists in TSiteBuilder 1.0 via the id paramete…
• CVE-2018-6367SQL Injection exists in Vastal I-Tech Buddy Zone Facebook Cl…
• CVE-2018-6370SQL Injection exists in the NeoRecruit 4.1 component for Joo…
• CVE-2018-6372SQL Injection exists in the JB Bus 2.3 component for Joomla!…
• CVE-2018-6373SQL Injection exists in the Fastball 2.5 component for Jooml…9.8
• CVE-2018-6374The GUI component (aka PulseUI) in Pulse Secure Desktop Linu…
• CVE-2018-6376In Joomla! before 3.8.4, the lack of type casting of a varia…
• CVE-2018-6377In Joomla! before 3.8.4, inadequate input filtering in com_f…