Cmsjunkie Vulnerabilities and Affected Products
Vulnerabilities associated with ClassifiedsManager.
Products
Clear product- ClassifiedsManager1 vulnerability
- J-BusinessDirectory1 vulnerability
- J-CruisePortal1 vulnerability
- JHotelReservation1 vulnerability
- MultipleHotelReservation1 vulnerability
- WP-BusinessDirectory – Business directory plugin for WordPress1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2019-25751HIGH | Joomla J-ClassifiedsManager 3.0.5 SQL InjectionJoomla Component J-ClassifiedsManager 3.0.5 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through POST parameters. Attackers can submit crafted SQL payloads in the categorySearch, adType, and citySearch parameters to the displayads component to extract sensitive database information including usernames, databases, and version details. CWE-89Jun 19, 2026 | CVSS8.8v4.0 | EPSS0.449% | PoCs1 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |