CVE-2026-78080 - Joomla Extension - feenders.de - Unauthenticated SQL injection in JooDatabase Lite < 5.1.0

Back Back to CVE browser

CRITICAL

Joomla Extension - feenders.de - Unauthenticated SQL injection in JooDatabase Lite < 5.1.0

Published Sep 3, 2026

9.3

CRITICAL

CVSS 4.0

EPSS 0.39%

Description

Joomla Extension - feenders.de - Unauthenticated SQL injection in JooDatabase Lite < 5.1.0 - The cid parameter is used in queries without validation, allowing SQLi vectors.

Affected products

Vendor Joodb.feenders.de Product JooDatabase Lite extension for Joomla Default
unaffected
Affected
- 1.0-5.0.0

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Joodb.feenders.de	JooDatabase Lite extension for Joomla	unaffected	Affected 1.0-5.0.0

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-70452
Advisory
https://joodb.feenders.de/
product

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-70452		Advisory
https://joodb.feenders.de/		product

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner Joomla

Published Sep 3, 2026

Updated Sep 3, 2026

Reserved Aug 22, 2026

Link CVE-2026-78080

CISA Vulnrichment

Updated Sep 3, 2026

NVD

Status Deferred

Modified Sep 3, 2026

Link CVE-2026-78080

Red Hat

No data

ENISA EUVD

Assigner Joomla

Published Sep 3, 2026

Updated Sep 3, 2026

Link EUVD-2026-70452

GitHub

No data