CVE-2019-9184

CVE-2019-9184 affects the Joomla! J2Store plugin (versions prior to 3.3.7). The vulnerability is a SQL injection in the product_option[] parameter, allowing remote attackers to execute arbitrary SQL commands. Exploitation details in public reports reference the vulnerable parameter (product_optio...

CVE-2020-13996

The CVE concerns the J2Store Joomla! plugin prior to version 3.3.13. A SQL injection vulnerability exists in J2Store’s database handling due to lack of validation of externally supplied SQL statements, exploitable by a trusted store manager. Affected component: J2Store plugin (Joomla!) before 3.3...

CVE-2015-6513

The CVE-2015-6513 issue affects Joomla! J2Store (com_j2store) prior to version 3.1.7. The vulnerability arises from multiple SQL injection flaws in index.php, specifically via the sortby and manufacturer_ids[] parameters, allowing remote attackers to execute arbitrary SQL commands. Several connec...