Skip to content
OpenAdvisories

Vendor

cmsjunkie

6 known vulnerabilities.

Products

WP-BusinessDirectory – Business directory plugin for WordPress 1 JHotelReservation 1 MultipleHotelReservation 1 J-CruisePortal 1 ClassifiedsManager 1 J-BusinessDirectory 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 8.2
    CVE-2019-25752

    Joomla! Component J-BusinessDirectory 4.9.7 SQL Injection

    Joomla! Component J-BusinessDirectory 4.9.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the type parameter. Attackers can send GET requests to index.php wit…

    cmsjunkie J-BusinessDirectory
  • High 8.2
    CVE-2019-25751

    Joomla J-ClassifiedsManager 3.0.5 SQL Injection

    Joomla Component J-ClassifiedsManager 3.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through POST parameters. Attackers can submit crafted SQL payloads in the ca…

    cmsjunkie ClassifiedsManager
  • High 8.2
    CVE-2019-25750

    Joomla J-MultipleHotelReservation 6.0.7 SQL Injection

    Joomla Component J-MultipleHotelReservation 6.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the hotel_id parameter. Attackers can send POST requests to th…

    cmsjunkie MultipleHotelReservation
  • High 7.1
    CVE-2019-25749

    Joomla J-CruisePortal 6.0.4 SQL Injection via cruises

    Joomla J-CruisePortal 6.0.4 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the guest_adult parameter. Attackers can send POST requests to the cruises endpoint wi…

    cmsjunkie J-CruisePortal
  • High 8.2
    CVE-2019-25748

    Joomla JHotelReservation 6.0.7 SQL Injection via search-hotels

    Joomla JHotelReservation 6.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the rooms parameter. Attackers can send POST requests to the search-hotels endpoi…

    cmsjunkie JHotelReservation