Vulnerabilities CVE-2020-37224

CVE-2020-37224

High

Open

TLP:CLEAR

Joomla J2 JOBS 1.3.0 Authenticated SQL Injection via sortby

NVD CVE.org

Data Exfiltration

AI Analysis

No AI analysis yet.

Description

Joomla J2 JOBS 1.3.0 contains an authenticated SQL injection vulnerability that allows authenticated attackers to manipulate database queries by injecting SQL code through the 'sortby' parameter. Attackers can send POST requests to the administrator index with malicious 'sortby' values to extract sensitive database information.

Details

CVSS Score: 7.1
EPSS Score ⓘ: 0.27%

19.4th percentile
CVSS Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N
Confidence: 90%
Published: May 13, 2026
Last Modified: Jul 15, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.