Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Joomla! Component JoomCRM 1.1.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the deal_id parameter. Attackers can send GET requests to index.php with option=com_joomcrm&view=contacts and inject SQL code in the deal_id parameter to extract sensitive database information including table names and schemas.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2019-25761 Joomla! Component JoomCRM 1.1.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious co… https://www.cve.org/CVERecord?id=CVE-2019-25761
Post summary
The statement reports a newly disclosed SQL injection flaw in JoomCRM 1.1.1 that permits authenticated attackers to run arbitrary SQL commands.
🚨*CVE* CVE-2019-25761 Joomla! Component JoomCRM 1.1.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious co… https://www.cve.org/CVERecord?id=CVE-2019-25761 ----- Traducción: La vulnerabilidad … http://infoflow.cloud`
Post summary
The post announces CVE-2019-25761, detailing an authenticated SQL injection in Joomla! Component JoomCRM 1.1.1 that permits arbitrary SQL execution, with no evidence of exploitation or remediation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | joomboost | joomcrm | 1.1.1 | joomla\! | - |