Approved changes feed: RSS · Atom

cpe:2.3:a:joombooking:jb_visa:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJoombooking (89ec2be1-0d24-5d58-adaf-19e20f6ab1f4)
ProductJb Visa (ccb3cb5a-2c7c-5a83-b424-7b024e72c9a8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-20255 vulnerable 2026-07-28 18:56:21.322561 Joomla! Component JB Visa 1.0 SQL Injection via visatype
HIGH (8.2)
Joomla! Component JB Visa 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the visatype parameter. Attackers can send GET requests to index.php with the option=com_bookpro and view=popup parameters, injecting SQL commands in the visatype parameter to extract sensitive database information including credentials and table contents.
Published: 2026-06-19T15:27:25.104Z
Updated: 2026-06-22T14:33:19.635Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.