Approved changes feed: RSS · Atom

cpe:2.3:a:cmsjunkie:multiplehotelreservation:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCmsjunkie (e7c889c4-aa66-593c-a330-b858804c5791)
ProductMultiplehotelreservation (83693025-4d44-5c4b-9163-1ddc847b8437)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-25750 vulnerable 2026-07-28 19:45:00.533507 Joomla J-MultipleHotelReservation 6.0.7 SQL Injection
HIGH (8.2)
Joomla Component J-MultipleHotelReservation 6.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the hotel_id parameter. Attackers can send POST requests to the search-hotels endpoint with crafted SQL UNION SELECT statements to extract sensitive database information including table names and column data.
Published: 2026-06-19T17:08:23.474Z
Updated: 2026-06-22T14:07:33.778Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.