Approved changes feed: RSS · Atom

cpe:2.3:a:artio:joomla!_com_booking_component:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorArtio (8cfedb46-09bf-549a-9196-e47d542436f1)
ProductJoomla! Com Booking Component (97c3756c-41c3-5d30-b6dd-7eb27f26ce88)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-54357 vulnerable 2026-07-28 22:14:30.666383 Joomla com_booking 2.4.9 Information Disclosure via Account Enumeration
HIGH (7.5)
Joomla com_booking component 2.4.9 contains an information disclosure vulnerability that allows unauthenticated attackers to enumerate user accounts by exploiting the getUserData function in the customer controller. Attackers can send GET requests to index.php with option=com_booking, controller=customer, task=getUserData, and an id parameter to retrieve user names, usernames, and email addresses through brute force enumeration.
Published: 2026-06-19T17:52:06.684Z
Updated: 2026-06-23T02:19:31.751Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.