CVE-2023-38044

CVE-2023-38044: Extension - hikashop.com - SQLi in HikaShop component for Joomla <= 4.7.2

Vendor Hikashop.com

Product HikaShop component for Joomla

Weakness CWE-89 · SQLi

Published August 7, 2023

Last update October 20, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability allows SQL Injection.

Key dates

02Disclosure timeline

August 7, 2023 CVE published

October 20, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-38044 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/89.html AskarLabs — CWE-89 write-up SQL Injection

Related vulnerabilities

04Related CVE

CVE-2026-65890 Joomla Extension - balbooa.com - Unauthenticated SQL injection in Gridbox < 2.20.2 CVE-2026-15671 SMS Alert <= 3.9.7 - Authenticated (Administrator+) SQL Injection via 'id' Parameter CVE-2026-15344 WP Photo Album Plus <= 9.2.04.002 - Authenticated (Administrator+) SQL Injection via 'table' Parameter CVE-2026-15267 Taskbuilder <= 5.0.9 - Authenticated (Subscriber+) SQL Injection CVE-2026-65451 WordPress MapSVG plugin <= 8.14.0 - SQL Injection vulnerability