CVSS base score
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
What the vulnerability does
Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'sortby' parameter. Attackers can send POST requests to the administrator index with malicious 'sortby' values to extract sensitive database information.
Explanation of Vulnerability in Simple Terms
J2 JOBS contains a SQL injection vulnerability in versions 1.3.0 and later. An attacker with low-level access can inject malicious SQL commands through unfiltered input, potentially reading or modifying the site's database. The vulnerability requires authentication but no user interaction.
What an attacker can do
Read or modify database contents by injecting SQL commands through the application.
Potential impact on your site
Unauthorized access to job listings, user data, and site configuration stored in the database.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
