CNNVD-202510-512 Information

CNNVD ID

CNNVD-202510-512

CVE-2025-40636

  • CNNVD Published: 2025-10-03

Description (Chinese)

Joomla module mod_vvisit_counter是Vinaora个人开发者的一个Joomla! CMS的第三方扩展模块。 Joomla module mod_vvisit_counter v2.0.4j3版本存在SQL注入漏洞,该漏洞源于对cip_vvisitcounter cookie参数处理不当,可能导致SQL注入攻击。

Description (English)

Joomla module mod vvisit counter is a Joomla! CMS third-party extension module for Vinora personal developers. Jomla module mod vvisit counter v2.0.4j3 has an injection loophole in SQL, which stems from the mishandling of the cip vvisitcounter cookie parameter, which may lead to an attack on SQL injection.

Hazard Level

High

Vulnerability Type

SQL注入

Affected Vendor

个人开发者

Published

2025-10-03

Last Modified

2026-02-24

References

https://www.incibe.es/en/incibe-cert/notices/aviso/sql-injection-modvvisitcounter-module

Share on: