Unrated severityNVD Advisory· Published Jan 26, 2014· Updated Jun 17, 2026
CVE-2014-0794
CVE-2014-0794
Description
SQL injection vulnerability in the JV Comment (com_jvcomment) component before 3.0.3 for Joomla! allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a comment.like action to index.php.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:joomla:com_jvcomment:3.0.2:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:joomla:com_jvcomment:3.0.2:*:*:*:*:*:*:*
- (no CPE)range: <3.0.3
Patches
Vulnerability mechanics
References
7- extensions.joomla.org/extensions/contacts-and-feedback/articles-comments/23394nvdVendor Advisory
- www.exploit-db.com/exploits/31175nvd
- www.osvdb.org/101960nvd
- www.securityfocus.com/archive/1/530872/100/0/threadednvd
- www.securityfocus.com/bid/64661nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/90532nvd
- www.htbridge.com/advisory/HTB23195nvd
News mentions
0No linked articles in our index yet.