Логотип exploitDog
bind:CVE-2025-2126
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2025-2126

Количество 3

Количество 3

nvd логотип

CVE-2025-2126

11 месяцев назад

A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla and classified as critical. This issue affects some unknown processing of the file /extensions/realestate/index.php/properties/list/list-with-sidebar/realties of the component GET Parameter Handler. The manipulation of the argument title leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS3: 6.3
EPSS: Низкий
github логотип

GHSA-5fj2-xqgx-m987

11 месяцев назад

A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla and classified as critical. This issue affects some unknown processing of the file /extensions/realestate/index.php/properties/list/list-with-sidebar/realties of the component GET Parameter Handler. The manipulation of the argument title leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS3: 6.3
EPSS: Низкий
fstec логотип

BDU:2025-16004

11 месяцев назад

Уязвимость компонента GET Parameter Handler плагина JoomlaUX JUX Real Estate для системы управления контентом (CMS) Joomla, позволяющая нарушителю позволяющая нарушителю выполнить произвольный SQL-код

CVSS3: 8.8
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2025-2126

A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla and classified as critical. This issue affects some unknown processing of the file /extensions/realestate/index.php/properties/list/list-with-sidebar/realties of the component GET Parameter Handler. The manipulation of the argument title leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS3: 6.3
1%
Низкий
11 месяцев назад
github логотип
GHSA-5fj2-xqgx-m987

A vulnerability was found in JoomlaUX JUX Real Estate 3.4.0 on Joomla and classified as critical. This issue affects some unknown processing of the file /extensions/realestate/index.php/properties/list/list-with-sidebar/realties of the component GET Parameter Handler. The manipulation of the argument title leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS3: 6.3
1%
Низкий
11 месяцев назад
fstec логотип
BDU:2025-16004

Уязвимость компонента GET Parameter Handler плагина JoomlaUX JUX Real Estate для системы управления контентом (CMS) Joomla, позволяющая нарушителю позволяющая нарушителю выполнить произвольный SQL-код

CVSS3: 8.8
1%
Низкий
11 месяцев назад

Уязвимостей на страницу