Joodatabase Lite Extension For Joomla
Monthly
SQL injection in the JooDatabase Lite extension for Joomla (by feenders.de) before version 5.1.0 allows remote unauthenticated attackers to inject arbitrary SQL via the unvalidated cid parameter. Because the parameter is concatenated into database queries without sanitization or parameterization, an attacker can read, modify, or destroy backend data. Rated CVSS 4.0 9.3 (critical); no public exploit code and no active-exploitation listing were identified at time of analysis.
SQL injection in the JooDatabase Lite extension for Joomla (by feenders.de) before version 5.1.0 allows remote unauthenticated attackers to inject arbitrary SQL via the unvalidated cid parameter. Because the parameter is concatenated into database queries without sanitization or parameterization, an attacker can read, modify, or destroy backend data. Rated CVSS 4.0 9.3 (critical); no public exploit code and no active-exploitation listing were identified at time of analysis.