Veille CVE

Recherche « Cmsjunkie J-BusinessDirectory »

9 CVE

Critique 2 Élevée 3 Moyenne 4 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Cmsjunkie J-BusinessDirectory » ✕
  1. CVE-2026-75956 8.7 Élevée

    cmsjunkie.com J-BusinessDirectory extension for Joomla

    Joomla Extension - cmsjunkie.com - DOS vector in pagination parameter handling in J-BusinessDirectory < 6.2.3 - Pagination values were not strictly typed. Array/non-numeric values (for example limitstart[]) could trigger PHP type errors in arithmetic, and limit was not validated before use in list queries.

  2. CVE-2026-75955 5.1 Moyenne

    cmsjunkie.com J-BusinessDirectory extension for Joomla

    Joomla Extension - cmsjunkie.com - Reflected XSS / XML injection in J-BusinessDirectory < 6.2.3 - companyName from the request was written unescaped into an XML attribute.

  3. CVE-2026-75954 9.3 Critique

    cmsjunkie.com J-BusinessDirectory extension for Joomla

    Joomla Extension - cmsjunkie.com - SQL injection in trips search in J-BusinessDirectory < 6.2.3 - Search keywords and ORDER BY were concatenated into SQL. 6.2.3 quotes keywords and allow-lists the sort clause.

  4. CVE-2026-75953 7.5 Élevée

    cmsjunkie.com J-BusinessDirectory extension for Joomla

    Joomla Extension - cmsjunkie.com - Open mail relay in J-BusinessDirectory < 6.2.3 - Recipient address was taken from the request (contact_id_offer / contact_id_event) instead of the server-side offer/event record, so mail could be sent to an arbitrary address.

  5. CVE-2026-75952 4.6 Moyenne

    cmsjunkie.com J-BusinessDirectory extension for Joomla

    Joomla Extension - cmsjunkie.com - Cross-site request forgery in J-BusinessDirectory < 6.2.3 - Tokens were missing on many AJAX/state-changing tasks: contact/quote forms, cart, bookmarks, uploads, messages, AI text generation, and several administrator actions (app install, demo-data wipe, cache/statistics archive, payment notification send, mobile push). Frontend CSRF needs a registered/listing-owner session; admin CSRF needs a backend admin session.

  6. CVE-2026-75951 6.9 Moyenne

    cmsjunkie.com J-BusinessDirectory extension for Joomla

    Joomla Extension - cmsjunkie.com - Insecure Direct Object Reference (multiple frontend/API actions) in J-BusinessDirectory < 6.2.3

  7. CVE-2026-75950 6.9 Moyenne

    cmsjunkie.com J-BusinessDirectory extension for Joomla

    Joomla Extension - cmsjunkie.com - Unauthenticated listing ownership takeover in J-BusinessDirectory < 6.2.3 - Ownership could be changed using attacker-supplied company and user IDs, including for listings that already had an owner. 6.2.3 binds the action to the authenticated user and only allows unowned listings.

  8. CVE-2026-75949 10.0 Critique

    cmsjunkie.com J-BusinessDirectory extension for Joomla

    Joomla Extension - cmsjunkie.com - Arbitrary file upload / deletion (path traversal) in J-BusinessDirectory < 6.2.3 - Upload/remove accepted a client-controlled root (_path_type could point at the component site/admin trees), did not enforce path containment, and used a weak extension check. CSRF token was also missing on upload/remove.

  9. CVE-2019-25752 8.2 Élevée

    Cmsjunkie J-BusinessDirectory

    Joomla! Component J-BusinessDirectory 4.9.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the type parameter. Attackers can send GET requests to index.php with the option=com_jbusinessdirectory&task=categories.getCategories parameters and inject UNION-based SQL statements in the type parameter to extract database information including schema names and sensitive data.