CVE-2020-37226

High

Published: 13/05/2026(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

Joomla J2 JOBS version 1.3.0 contains an authenticated SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the 'sortby' parameter. Attackers can send malicious 'sortby' values in POST requests to the administrator index to extract sensitive database information.

Risk Assessment

This vulnerability poses a serious risk to organizations as it allows authenticated attackers to access sensitive data in the database. This could lead to data leaks and breaches of user privacy.

Recommendation

It is recommended to update Joomla J2 JOBS to the latest version that addresses this vulnerability. Additionally, monitoring server logs for potential attack attempts is advisable.

Other vulnerabilities in Joomla J2 JOBS 1.3.0

CVE-2020-37224High
Joomla J2 JOBS version 1.3.0 contains an authenticated SQL injection vulnerability that allows attackers to manipulate database queries by injecting SQL code through the 'sortby' parameter. Attackers can send POST requests to the administrator index with malicious 'sortby' values to extract sensitive database information.

Original NVD description (English source)

Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'sortby' parameter. Attackers can send POST requests to the administrator index with malicious 'sortby' values to extract sensitive database information using automated tools.