Unrated severityNVD Advisory· Published Mar 29, 2019· Updated Aug 4, 2024

CVE-2019-9918

Description

An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Input does not get validated and queries are not written in a way to prevent SQL injection. Therefore arbitrary SQL-Statements can be executed in the database.

Affected products

WordPress/Harmis Je Messengerinferred
Range: = 1.2.2
Package: https://wordpress.org/plugins/harmis-je-messenger
Telegramdesktop/Messengerllm-fuzzy
Range: =1.2.2

Patches

Vulnerability mechanics

References

extensions.joomla.org/extension/je-messenger/mitrex_refsource_MISC
github.com/azd-cert/CVE/blob/master/CVEs/CVE-2019-9918.mdmitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000