CVE-2018-25348

High

Published: 23/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

The Ek Rishta component in Joomla! version 2.10 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cid parameter. Attackers can send GET requests to the user_detail view with malicious cid values containing SQL commands.

Risk Assessment

This vulnerability could lead to the exposure of sensitive database information, posing a serious security threat to the organization.

Recommendation

It is recommended to update the Ek Rishta component to the latest version to eliminate this vulnerability and to implement input data filtering to minimize the risk of SQL injection.

Original NVD description (English source)

Joomla! Component Ek Rishta 2.10 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cid parameter. Attackers can send GET requests to the user_detail view with malicious cid values containing SQL commands to extract sensitive database information.