Approved changes feed: RSS · Atom

cpe:2.3:a:joomboost:joomcrm:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorJoomboost (f63703e4-12c7-5187-b259-734c05708d2d)
ProductJoomcrm (3872bcd4-7923-578a-bfeb-ca0cb545ba20)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-25761 vulnerable 2026-07-28 19:45:00.584429 Joomla! Component JoomCRM 1.1.1 SQL Injection via deal_id
HIGH (7.1)
Joomla! Component JoomCRM 1.1.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the deal_id parameter. Attackers can send GET requests to index.php with option=com_joomcrm&view=contacts and inject SQL code in the deal_id parameter to extract sensitive database information including table names and schemas.
Published: 2026-06-19T17:45:23.204Z
Updated: 2026-06-22T17:52:08.064Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.