CVE-2013-3932

SQL injection vulnerability in the Jomres (com_jomres) component before 7.3.1 for Joomla!

published January 2, 2020

CVSS
—
EPSS
2%
Percentile
77.8
In the wild
Unconfirmed
What it is

SQL injection vulnerability in the Jomres (com_jomres) component before 7.3.1 for Joomla! allows remote authenticated users with the "Business Manager" permission to execute arbitrary SQL commands via the id parameter in an editProfile action to administrator/index.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01758 · 77.8th percentile
Published
2020-01-02T19:26Z
EPSS history
Timeline
  • 02 JAN 19:26Z
    SQL injection vulnerability in the Jomres (com_jomres) component before 7.3.1 for Joomla!
    cvelistv5