TROYANOSYVIRUS
← Back to CVEs

CVE-2019-19846

CRITICAL
9.8

Description

In Joomla! before 3.9.14, the lack of validation of configuration parameters used in SQL queries caused various SQL injection vectors.

CVE Details

CVSS v3.1 Score9.8
SeverityCRITICAL
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack VectorNETWORK
ComplexityLOW
Privileges RequiredNONE
User InteractionNONE
Published12/18/2019
Last Modified11/21/2024
Sourcenvd
Honeypot Sightings0

Affected Products

joomla:joomla\!

Weaknesses (CWE)

CWE-89

References

https://developer.joomla.org/security-centre/797-20191202-core-various-sql-injections-through-configuration-parameters(cve@mitre.org)
https://developer.joomla.org/security-centre/797-20191202-core-various-sql-injections-through-configuration-parameters(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.