CVE-2019-25751
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
The Joomla Component J-ClassifiedsManager version 3.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through POST parameters.
Risk Assessment
Attackers can access sensitive database information, including usernames, databases, and version details, which may lead to serious security breaches.
Recommendation
It is recommended to update the J-ClassifiedsManager component to the latest version and implement appropriate security measures to minimize the risk of SQL injection.
Original NVD description (English source)
Joomla Component J-ClassifiedsManager 3.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through POST parameters. Attackers can submit crafted SQL payloads in the categorySearch, adType, and citySearch parameters to the displayads component to extract sensitive database information including usernames, databases, and version details.