CVE-2026-105604criticalCWE-89

CVE-2026-105604: falha crítica em dj-extensions.com DJ-Classifieds extension for…

Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar DJ-Classifieds extension for Joomla

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.3epss 0.4%
Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3 - The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated SQL injection vector in the frontend search.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
dj-extensions.com · DJ-Classifieds extension for Joomla
CVEs relacionadas — dj-extensions.com DJ-Classifieds extension for…

No mesmo produto, das mais perigosas para as menos.

CVE-2026-61424CRITICALJoomla Extension - dj-extensions.com - Unauthenticated arbitrary file upload in DJ-Classifieds < 3.11.2EPSS 0.4%CVE-2026-105603CRITICALJoomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3EPSS 0.3%CVE-2026-105605MEDIUMJoomla Extension - dj-extensions.com - IDOR vulnerability allowing cross-account ad access in DJ-Classifieds < 3.11.3EPSS 0.3%