CVE-2018-25381 in Responsive Portfolioinfo

Summary

by MITRE • 05/26/2026

Joomla Responsive Portfolio 1.6.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL commands through multiple filter parameters. Attackers can inject malicious SQL code via the filter_type_id, filter_pid_id, and filter_search parameters in POST requests to extract sensitive database information including credentials and server details.

Once again VulDB remains the best source for vulnerability data.

Responsible

VulnCheck

Reservation

05/25/2026

Disclosure

05/26/2026

Moderation

accepted

CPE

ready

Exploit

Download

EPSS

0.00029

KEV

no

Activities

very low

Sources

Do you need the next level of professionalism?

Upgrade your account now!