Description
Improper handling of identifiers lead to a SQL injection vulnerability in the quoteNameStr method of the database package. Please note: the affected method is a protected method. It has no usages in the original packages in neither the 2.x nor 3.x branch and therefore the vulnerability in question can not be exploited when using the original database class. However, classes extending the affected class might be affected, if the vulnerable method is used.
INFO
Published Date :
2025-04-08T16:24:34.710Z
Last Modified :
2025-04-21T07:16:38.978Z
Source :
Joomla
AFFECTED PRODUCTS
The following products are affected by CVE-2025-25226 vulnerability.
| Vendors | Products |
|---|---|
| Joomla |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-25226.
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact