CVE-2016-1000119

High

Published: 21/10/2016(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Huge IT catalog plugin version 1.0.4 for Joomla contains vulnerabilities to SQL Injection (SQLi) and Cross-Site Scripting (XSS) attacks. These flaws can be exploited by attackers to gain unauthorized access to data or execute malicious code.

Risk Assessment

Organizations using this plugin may be exposed to data theft and other attacks that could lead to serious legal and financial consequences.

Recommendation

It is recommended to update the Huge IT catalog plugin to the latest version that addresses these vulnerabilities and to conduct a security audit of the system.

Other vulnerabilities in Huge IT catalog v1.0.4

CVE-2016-1000125Critical
Huge-IT Catalog v1.0.7 for Joomla is vulnerable to unauthenticated SQL injection, which can be exploited by an attacker to gain access to the database.

Original NVD description (English source)

SQLi and XSS in Huge IT catalog extension v1.0.4 for Joomla