In Joomla! 3.5.0 through 3.8.5, the lack of type casting of a variable in a SQL statement leads to a SQL injection vulnerability in the User Notes list view.
We have discovered 130,031 live websites that are affected by CVE-2018-8045.
| Product | |
| Category | Content Management System |
| Vulnerable Domains | 130,031 live websites (97% of Joomla install base) |
| Vulnerable Versions |
|
| Vulnerable Versions Count | 56 versions ( 43% of all versions) |
| 7,196 websites | |
| 36,730 websites | |
| 11,632 websites | |
| 7,117 websites | |
| 7,017 websites | |
| 5,248 websites | |
| 5,090 websites | |
| 4,612 websites | |
| 4,287 websites | |
| 3,729 websites |
| .com | 28,269 websites |
| .it | 24,442 websites |
| .ru | 9,670 websites |
| .nl | 3,976 websites |
| .de | 3,720 websites |
| .se | 3,141 websites |
| .org | 3,113 websites |
| .cz | 2,984 websites |
| .co.uk | 2,770 websites |
| .net | 2,596 websites |
| Domain | Country | Rank | Contacts |
|---|---|---|---|
| *****.com | **,*** | ||
| ************.com | **,*** | ||
| ************.com | **,*** | ||
| *********************.com | **,*** | ||
| *****.org | **,*** | ||
| ********.com | **,*** | ||
| *****.it | **,*** | ||
| *********.com | **,*** | ||
| ******.cz | **,*** | ||
| *******.ru | **,*** |