Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Joomla! Component VMap 1.9.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code into the latlngbound parameter. Attackers can send GET requests to index.php with the option=com_vmap&task=loadmarker parameters containing SQL injection payloads to manipulate database queries and extract sensitive information.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2019-25753 Joomla! Component VMap 1.9.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious cod… https://www.cve.org/CVERecord?id=CVE-2019-25753
Post summary
The entry reports a SQL injection vulnerability (CVE-2019-25753) in Joomla! Component VMap 1.9.6, highlighting the flaw but providing neither exploit code nor patch details.
🚨*CVE* CVE-2019-25753 Joomla! Component VMap 1.9.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious cod… https://www.cve.org/CVERecord?id=CVE-2019-25753 ----- Traducción: CVE-2019-25753 Joo… http://infoflow.cloud`
Post summary
The tweet announces CVE‑2019‑25753, an unauthenticated SQL injection in Joomla! VMap 1.9.6, but does not provide exploit code, patch information, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | wdmtech | vmap | 1.9.6 | joomla\! | - |