Joomla! 'J2Store < 3.3.7' SQL Injection

Description

A vulnerability in the J2Store component for Joomla! allows attackers to inject and execute SQL commands on the website’s database, potentially leading to data theft, manipulation, or unauthorized access.

Recommendation

To mitigate the risk, upgrade J2Store to the latest stable version, which includes patches for the vulnerability (version 3.3.7 and above).

References

• Joomla!
• CVE-2019-9184
• CAPEC-310
• OWASP 2021-A6

Related Issues

• Joomla! Component JEXTN Video Gallery 3.0.5 'id' SQLI - CVE-2017-17872
• Joomla! Component JCK Editor 6.4.4 'parent' SQLI - CVE-2018-17254
• Joomla! Component JB Bus 2.3 'order_number' SQLI - CVE-2018-6372
• Joomla! Component InviteX 3.0.5 'invite_type' SQLI - CVE-2018-6394

You might also like:

44 New SQL Injection Tests for WordPress in SmartScanner 1.8

How do hackers hack websites?

SmartScanner 1.13 now has logs and more Joomla! tests

Tags:

Joomla

SQL Injection