Skip to content
Sign in
7.1 High

CVE-2020-37224 Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to…

Description

Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'sortby' parameter. Attackers can send POST requests to the administrator index with malicious 'sortby' values to extract sensitive database information.

Affected products and versions

Product Affected versions Fixed in
J2 JOBS 1.3.0 No fix stated

Other CVEs of J2 JOBS

The 2 CVEs of J2 JOBS →
CVE-2020-37226 Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to… 7.1 High
Track this CVE