CVSS base score
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
What the vulnerability does
Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'sortby' parameter. Attackers can send POST requests to the administrator index with malicious 'sortby' values to extract sensitive database information using automated tools.
Explanation of Vulnerability in Simple Terms
J2 JOBS contains a SQL injection vulnerability in versions 1.3.0 and later. An attacker with low-level user privileges can inject malicious SQL commands through unfiltered input, potentially reading or modifying the site's database. The vulnerability requires network access and valid user credentials but no additional user interaction.
What an attacker can do
Read or modify the site database by injecting SQL commands through user input.
Potential impact on your site
Attackers with user accounts can steal sensitive data, modify job listings, or corrupt the database.
Conditions required to exploit
Valid user account with low-level privileges; network access to the site.
Key dates
External resources
Related vulnerabilities
