Veille CVE

Recherche « Cmsjunkie J-CruisePortal »

1 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Cmsjunkie J-CruisePortal » ✕
  1. CVE-2019-25749 7.1 Élevée

    Cmsjunkie J-CruisePortal

    Joomla J-CruisePortal 6.0.4 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the guest_adult parameter. Attackers can send POST requests to the cruises endpoint with crafted SQL payloads in the guest_adult parameter to extract sensitive database information or manipulate database records.