Skip to content
OpenAdvisories

Vendor

cmsjunkie.com

8 known vulnerabilities.

Products

J-BusinessDirectory extension for Joomla 8
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-75954

    Joomla Extension - cmsjunkie.com - SQL injection in trips search in J-BusinessDirectory < 6.2.3

    Joomla Extension - cmsjunkie.com - SQL injection in trips search in J-BusinessDirectory < 6.2.3 - Search keywords and ORDER BY were concatenated into SQL. 6.2.3 quotes keywords and allow-lists the sort clause.

    cmsjunkie.com J-BusinessDirectory extension for Joomla Web / CMS
  • Critical 10.0
    CVE-2026-75949

    Joomla Extension - cmsjunkie.com - Arbitrary file upload / deletion (path traversal) in J-BusinessDirectory < 6.2.3

    Joomla Extension - cmsjunkie.com - Arbitrary file upload / deletion (path traversal) in J-BusinessDirectory < 6.2.3 - Upload/remove accepted a client-controlled root (_path_type could point at the component site/admin trees), did not enforce path containment,…

    cmsjunkie.com J-BusinessDirectory extension for Joomla Web / CMS