CVSS base score
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
What the vulnerability does
Joomla! Component Ek Rishta 2.10 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cid parameter. Attackers can send GET requests to the user_detail view with malicious cid values containing SQL commands to extract sensitive database information.
Explanation of Vulnerability in Simple Terms
Ek Rishta versions 2.10 and later contain a SQL injection vulnerability accessible over the network without authentication. An attacker can craft malicious input to execute arbitrary SQL queries against the application's database, potentially reading, modifying, or deleting sensitive data. No user interaction is required to exploit this vulnerability.
What an attacker can do
Execute arbitrary SQL queries to read, modify, or delete database records without authentication.
Potential impact on your site
Attackers can access, modify, or destroy all data stored in the application database without logging in.
Conditions required to exploit
Network access to the application; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
