CVE-2019-19846 - In Joomla! before 3.9.14, the lack of validation of configuration parameters used in SQL queries caused various SQL injection vectors

CRITICAL

In Joomla! before 3.9.14, the lack of validation of configuration parameters used in SQL queries caused various SQL injection vectors

Published Dec 18, 2019

9.8

CRITICAL

CVSS 3.1

EPSS 1.69%

In Joomla! before 3.9.14, the lack of validation of configuration parameters used in SQL queries caused various SQL injection vectors.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://developer.joomla.org/security-centre/797-20191202-core-various-sql-injections-through-configuration-parameters		x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-9442		Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Dec 18, 2019

Updated Aug 5, 2024

Reserved Dec 17, 2019

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published Dec 18, 2019

Updated Aug 5, 2024

Exploited since n/a