THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2019-25756 (HIGH 8.2) — Joomla! Component vAccount 2.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the vid parameter. Attackers can send GET requests to the vaccount-dashboard/expense endpoint with c

[NVD] CVE-2019-25756 (HIGH 8.2) — Joomla! Component vAccount 2.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the vid parameter. Attackers can send GET requests to the vaccount-dashboard/expense endpoint with c

lownvdPublished 2026-06-19

CVE-2019-25756 CVSS: 8.2 HIGH Published: 2026-06-19T18:16:18.230

Joomla! Component vAccount 2.0.2 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the vid parameter. Attackers can send GET requests to the vaccount-dashboard/expense endpoint with crafted SQL payloads in the vid parameter to extract se

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2019-25756