PT-2026-43062 · Joomla · Ek Rishta

Published 2026-05-23 · Updated 2026-05-23 · CVE-2018-25351

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Joomla! Component EkRishta version 2.10

Description An error-based SQL injection allows unauthenticated attackers to execute arbitrary SQL queries. This is achieved by submitting POST requests to the login endpoint using malicious code within the username parameter to extract database information, including system details and user credentials.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2018-25351

Affected Products

Ek Rishta

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2018-25351 · Security Note
• https://extensions.joomla.org/extension/ek-rishta · Note
• https://t.me/CVEtracker/54728 · Telegram Post
• https://joomlaextensions.co.in · Note
• https://vulncheck.com/advisories/joomla-component-ekrishta-sql-injection-via-username · Note
• https://exploit-db.com/exploits/44877 · Note