CVE-2019-25752
HighCVSS 8.2Exploitation Probability (EPSS)
Low risk38th percentile - higher than 38% of all known CVEs
Summary
The J-BusinessDirectory component version 4.9.7 for Joomla! contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the type parameter. Attackers can send GET requests to index.php with the parameters option=com_jbusinessdirectory&task=categories.getCategories and inject UNION-based SQL statements to extract database information including schema names and sensitive data.
Risk Assessment
This vulnerability poses a serious risk to organizations, allowing attackers to access sensitive data in the database. It may lead to data confidentiality loss and violations of data protection regulations.
Recommendation
It is recommended to update the J-BusinessDirectory component to the latest version to mitigate this vulnerability. Additionally, implementing security measures such as input filtering and validation is advisable.
Other vulnerabilities in J-BusinessDirectory 4.9.7
See all- CVE-2026-75954Critical
SQL injection vulnerability in Joomla extension J-BusinessDirectory (cmsjunkie.com) before version 6.2.3. In trips search, search keywords and ORDER BY were concatenated into SQL. Version 6.2.3 quotes keywords and allow-lists the sort clause.
- CVE-2026-75949Critical
The J-BusinessDirectory extension for Joomla before version 6.2.3 contains a vulnerability allowing arbitrary file upload/deletion via path traversal. The _path_type parameter can point to component site/admin trees, and the extension check is weak. CSRF token is also missing on upload/remove.
- CVE-2026-75956High
The Joomla extension J-BusinessDirectory before version 6.2.3 contains a DoS vulnerability in pagination parameter handling. Pagination values were not strictly typed. Array/non-numeric values (for example limitstart[]) could trigger PHP type errors in arithmetic, and limit was not validated before use in list queries.
- CVE-2026-75955Medium
The Joomla extension - cmsjunkie.com - J-BusinessDirectory before version 6.2.3 contains a reflected XSS / XML injection vulnerability. The companyName parameter from the request is written unescaped into an XML attribute, potentially allowing execution of malicious scripts in the victim's browser.
- CVE-2026-75953High
The Joomla extension J-BusinessDirectory versions below 6.2.3 contain an open mail relay. The recipient address is taken from the request (contact_id_offer / contact_id_event parameters) instead of the server-side offer/event record, allowing mail to be sent to an arbitrary address.
- CVE-2026-75952Medium
Joomla extension J-BusinessDirectory before version 6.2.3 contains a Cross-site request forgery (CSRF) vulnerability. Tokens are missing on many AJAX/state-changing tasks such as contact/quote forms, cart, bookmarks, uploads, messages, AI text generation, and several administrator actions. Frontend CSRF requires a registered/listing-owner session, while admin CSRF requires a backend admin session.
- CVE-2026-75951Medium
Joomla extension J-BusinessDirectory before version 6.2.3 contains an Insecure Direct Object Reference (IDOR) vulnerability in multiple frontend/API actions. This vulnerability allows direct object references without proper authorization.
- CVE-2026-75950Medium
Joomla extension J-BusinessDirectory before version 6.2.3 contains an unauthenticated listing ownership takeover vulnerability. Ownership could be changed using attacker-supplied company and user IDs, including for listings that already had an owner. Version 6.2.3 binds the action to the authenticated user and only allows unowned listings.
Original NVD description (English source)
Joomla! Component J-BusinessDirectory 4.9.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the type parameter. Attackers can send GET requests to index.php with the option=com_jbusinessdirectory&task=categories.getCategories parameters and inject UNION-based SQL statements in the type parameter to extract database information including schema names and sensitive data.