Veille CVE

Recherche « Cmsjunkie MultipleHotelReservation »

1 CVE

Critique 0 Élevée 1 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Cmsjunkie MultipleHotelReservation » ✕
  1. CVE-2019-25750 8.2 Élevée

    Cmsjunkie MultipleHotelReservation

    Joomla Component J-MultipleHotelReservation 6.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the hotel_id parameter. Attackers can send POST requests to the search-hotels endpoint with crafted SQL UNION SELECT statements to extract sensitive database information including table names and column data.