CVE-2025-40636

SQL injection vulnerability in Joomla module modvvisitcounter v2.0.4j3. This vulnerability allows an attacker to retrieve database content via the ‘cipvvisitcounter’ cookie at all endpoints where the plugin counts visits...

CVE-2025-40636

The CVE-2025-40636 entry describes a SQL injection in the Joomla module mod_vvisit_counter (version v2.0.4j3 ). The vulnerability stems from improper handling of the cookie parameter cip_vvisitcounter , allowing an attacker to retrieve database content at endpoints where the plugin counts visits....

Joomla module mod_vvisit_counter SQL注入漏洞

Joomla module modvvisitcounter is a third-party extension module for Joomla! CMS by the individual developer Vinaora. A SQL injection vulnerability exists in Joomla module modvvisitcounter version v2.0.4j3, which stems from improper handling of the cipvvisitcounter cookie parameter, which could...