Cmsjunkie Jhotelreservation vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Cmsjunkie Jhotelreservation: 1 record(s), with affected versions and fixes.cpe:2.3:a:cmsjunkie:jhotelreservation
CVE-2019-25748
High · 8.2
CWE-89 Jun 19, 2026
Joomla JHotelReservation 6.0.7 SQL Injection via search-hotels
Joomla JHotelReservation 6.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the rooms parameter. Attackers can send POST requests to the search-hotels endpoint with crafted SQL payloads in the rooms parameter to extract sensitive database information including version details.