Lucene search
+L

9 matches found

NVD
NVD
•added 2026/06/19 6:16 p.m.•25 views

CVE-2019-25755

Joomla Component vReview 1.9.11 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cmId parameter. Attackers can send POST requests to the editReview task endpoint with URL-encoded SQL UNION...

8.8CVSS0.00492EPSS
SaveExploits1References4
CVE
CVE
•added 2026/06/19 5:25 p.m.•44 views

CVE-2019-25755

CVE-2019-25755 details: Joomla Component vReview 1.9.11 has an SQL injection in the editReview task via the cmId parameter. Unauthenticated attackers can send POST requests with URL-encoded SQL UNION payloads to extract database data (usernames, passwords, versions). Impact per sources is high (C...

8.8CVSS6.3AI score0.00492EPSS
SaveExploits1References4Affected Software1
EUVD
EUVD
•added 2026/06/19 5:25 p.m.•20 views

EUVD-2019-20191

Joomla Component vReview 1.9.11 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cmId parameter. Attackers can send POST requests to the editReview task endpoint with URL-encoded SQL UNION...

8.8CVSS6.3AI score0.00492EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2026/06/19 5:25 p.m.•40 views

CVE-2019-25755 Joomla vReview 1.9.11 SQL Injection via editReview

Joomla Component vReview 1.9.11 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cmId parameter. Attackers can send POST requests to the editReview task endpoint with URL-encoded SQL UNION...

8.8CVSS0.00492EPSS
SaveExploits1References4
attackerkb
attackerkb
•added 2026/06/19 5:25 p.m.•9 views

CVE-2019-25755

Joomla Component vReview 1.9.11 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cmId parameter. Attackers can send POST requests to the editReview task endpoint with URL-encoded SQL UNION...

8.8CVSS6.3AI score0.00492EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/19 12:00 a.m.•2 views

CVE-2019-25755: Improper Neutralization of Special Elements used in an SQL Command

Joomla Component vReview 1.9.11 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the cmId parameter. Attackers can send POST requests to the editReview task endpoint with URL-encoded SQL UNION...

8.8CVSS6.3AI score0.00492EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/06/19 12:00 a.m.•49 views

PT-2026-50991

Name of the Vulnerable Software and Affected Versions Joomla Component vReview version 1.9.11 Description An SQL injection allows unauthenticated attackers to execute arbitrary SQL queries. This is achieved by sending POST requests to the 'editReview' task endpoint using URL-encoded SQL UNION...

8.8CVSS6AI score0.00492EPSS
SaveExploits1References8
Tenable Nessus
Tenable Nessus
•added 2025/08/09 12:00 a.m.•4 views

Linux Distros Unpatched Vulnerability : CVE-2025-38287

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: IB/cm: Drop lockdep assert and WARN when freeing old msg The send completion handler can run...

7.5CVSS5.9AI score0.00311EPSS
SaveExploits0References3
Citrix
Citrix
•added 2017/03/15 12:00 a.m.•14 views

Problems activating PVS Target Devices configured for KMS licensing

Your PVS Target Devices are configured for KMS licensing, and after activating the first PVS Target device, activation of other PVS Target Devices devices fail. When you look more closely at the Target Devices you find that the devices all share the same CMID. This means that when building the...

7.2AI score
SaveExploits0
Rows per page
Query Builder