CVE Intelligence

Joomboost Joomcrm vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Joomboost Joomcrm: 1 record(s), with affected versions and fixes.
cpe:2.3:a:joomboost:joomcrm

CVE-2019-25761 High · 7.1 CWE-89 Jun 19, 2026
Joomla! Component JoomCRM 1.1.1 SQL Injection via deal_id
Joomla! Component JoomCRM 1.1.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the deal_id parameter. Attackers can send GET requests to index.php with option=com_joomcrm&view=contacts and inject SQL code in the deal_id parameter to extract sensitive database information including table names and schemas.