Beveiligingsadvies

CVE-2026-81567

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-15 18:49:01

Laatst bijgewerkt 2026-09-16 06:00:21

Toegewezen door Joomla

CVSS-score 8.7

Status PUBLISHED

Beschrijving

Joomla Extension - j2commerce.com - Unauthenticated blind SQL injection in the storefront product list in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7 - Unauthenticated, blind extraction of arbitrary database content (e.g. customer records, order data, stored credentials/tokens) via boolean- or time-based inference, reachable on any public storefront that exposes the standard product listing or product-tags filter.

← Alle CVE's bekijken Bekijk op cve.org ↗