THREATOPS
THREAT OPS › Threat News › [NVD] CVE-2019-25761 (HIGH 7.1) — Joomla! Component JoomCRM 1.1.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the deal_id parameter. Attackers can send GET requests to index.php with option=com_joomcrm&view=contac

[NVD] CVE-2019-25761 (HIGH 7.1) — Joomla! Component JoomCRM 1.1.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the deal_id parameter. Attackers can send GET requests to index.php with option=com_joomcrm&view=contac

lownvdPublished 2026-06-19

CVE-2019-25761 CVSS: 7.1 HIGH Published: 2026-06-19T18:16:19.020

Joomla! Component JoomCRM 1.1.1 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the deal_id parameter. Attackers can send GET requests to index.php with option=com_joomcrm&view=contacts and inject SQL code in the deal_id parameter to ext

Indicators of compromise

Original source: https://nvd.nist.gov/vuln/detail/CVE-2019-25761