Browse CVEs

HIGH 8.1 CVE-2025-66336 Apache Doris MCP Server contains a SQL injection vulnerability in a metadata query path. A user-controlled database name is directly interpolated int… Doris Mcp Server 0.6.1+ Fix from $1,9502026-06-22 MEDIUM 6.3 CVE-2026-12776 A flaw has been found in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. This affects an unknown part of the file /i… Mitigation only Fix from $1,6002026-06-21 HIGH 7.3 CVE-2026-12775 A vulnerability was detected in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. Affected by this issue is some unkno… Mitigation only Fix from $1,9502026-06-21 HIGH 7.1 CVE-2019-25761 Joomla! Component JoomCRM 1.1.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injec… No fix yet Fix from $1,9502026-06-19 HIGH 8.2 CVE-2019-25755 Joomla Component vReview 1.9.11 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by inj… No fix yet Fix from $1,9502026-06-19 HIGH 8.2 CVE-2019-25756 Joomla! Component vAccount 2.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by in… No fix yet Fix from $1,9502026-06-19 HIGH 7.1 CVE-2019-25757 Joomla vWishlist 1.0.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting mali… No fix yet Fix from $1,9502026-06-19 HIGH 7.1 CVE-2019-25759 Joomla! Component vBizz 1.0.7 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecti… Vbizz after 1.0.7 Fix from $1,9502026-06-19 HIGH 8.2 CVE-2019-25750 Joomla Component J-MultipleHotelReservation 6.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary … Multiplehotelreservation No fix yet Fix from $1,9502026-06-19 HIGH 8.2 CVE-2019-25751 Joomla Component J-ClassifiedsManager 3.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL qu… Classifiedsmanager No fix yet Fix from $1,9502026-06-19 HIGH 8.2 CVE-2019-25752 Joomla! Component J-BusinessDirectory 4.9.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL qu… J Businessdirectory No fix yet Fix from $1,9502026-06-19 HIGH 8.2 CVE-2019-25753 Joomla! Component VMap 1.9.6 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by inject… Vmap No fix yet Fix from $1,9502026-06-19 HIGH 8.2 CVE-2019-25754 Joomla Component vRestaurant 1.9.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by … No fix yet Fix from $1,9502026-06-19 HIGH 7.1 CVE-2019-25749 Joomla J-CruisePortal 6.0.4 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting… J Cruiseportal No fix yet Fix from $1,9502026-06-19 HIGH 8.2 CVE-2017-20278 Joomla Component JoomRecipe 1.0.3 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by inj… Joomrecipe No fix yet Fix from $1,9502026-06-19 HIGH 8.2 CVE-2017-20279 Joomla Payage 2.05 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code… Joomla Payage No fix yet Fix from $1,9502026-06-19 HIGH 8.2 CVE-2017-20280 Joomla Component Myportfolio 3.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by in… Myportfolio No fix yet Fix from $1,9502026-06-19 HIGH 8.2 CVE-2017-20281 Joomla! Component Extra Search 2.2.8 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by … Extra Search No fix yet Fix from $1,9502026-06-19 HIGH 8.2 CVE-2017-20282 Joomla! Component jCart for OpenCart 2.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries… Jcart For Opencart No fix yet Fix from $1,9502026-06-19 HIGH 8.2 CVE-2019-25748 Joomla JHotelReservation 6.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by inje… Jhotelreservation No fix yet Fix from $1,9502026-06-19 HIGH 8.2 CVE-2017-20270 Joomla! Component Twitch Tv 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by inj… No fix yet Fix from $1,9502026-06-19 HIGH 8.2 CVE-2017-20271 Joomla StreetGuessr Game 1.1.8 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by inje… No fix yet Fix from $1,9502026-06-19 HIGH 8.2 CVE-2017-20272 Joomla Ultimate Property Listing 1.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries… Ultimate Property Listing No fix yet Fix from $1,9502026-06-19 HIGH 8.2 CVE-2017-20273 Joomla Event Registration Pro Calendar 4.1.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL q… No fix yet Fix from $1,9502026-06-19 HIGH 8.2 CVE-2017-20274 Joomla LMS King Professional 3.2.4.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by … Learning Management System King No fix yet Fix from $1,9502026-06-19 HIGH 8.2 CVE-2017-20275 Joomla! Component PHP-Bridge 1.2.3 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by … No fix yet Fix from $1,9502026-06-19 HIGH 8.2 CVE-2017-20276 Joomla! Component SIMGenealogy 2.1.5 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by … Simgenealogy No fix yet Fix from $1,9502026-06-19 HIGH 8.2 CVE-2017-20277 Joomla JoomRecipe 1.0.4 component contains a blind SQL injection vulnerability in the search_author parameter on the search results page. Attackers c… Joomla Joomrecipe No fix yet Fix from $1,9502026-06-19 HIGH 8.2 CVE-2017-20269 Joomla! Component KissGallery 1.0.0 contains an SQL injection vulnerability that allows unauthenticated attackers to inject SQL commands through the … No fix yet Fix from $1,9502026-06-19 HIGH 8.2 CVE-2017-20268 Joomla! Component Zap Calendar Lite 4.3.4 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL quer… No fix yet Fix from $1,9502026-06-19