PT-2025-9835 · Joomla · Convert Forms

Adam Wallwork · Publicado 2025-03-05 · Atualizado 2025-03-14 · CVE-2025-22212

Positive Technologies (AI Summary)

CVSS v3.1

2.7

Baixa

Vetor base

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions ConvertForms component versions 1.0.0 through 4.4.9 for Joomla

Description A SQL injection issue in the ConvertForms component for Joomla allows authenticated attackers, specifically administrators, to execute arbitrary SQL commands. This exploitation occurs in the submission management area of the backend.

Recommendations For ConvertForms component versions 1.0.0 through 4.4.9, update to a version that contains a fix for this issue to prevent SQL injection attacks.

Exploit

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2025-22212

Produtos afetados

Convert Forms

Referências · 7

• 🔥 https://github.com/AdamWallwork/CVEs/tree/main/2025/CVE-2025-22212 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-22212 · Nota de Segurança
• https://twitter.com/CVEnew/status/1897506916303032505 · Publicação no Twitter
• https://t.me/cvenotify/114891 · Publicação no Telegram
• https://tassos.gr · Nota
• https://t.me/cvedetector/19645 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-22212 · Aviso do Fabricante