PT-2026-50998 · Joomla · Joomproject

Ihsan Sencan · CVE-2019-25762 · Published 2026-06-19 · Updated 2026-06-22

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Joomla! Component JoomProject version 1.1.3.2

Description An information disclosure issue allows unauthenticated attackers to access sensitive user data by exploiting the projects endpoint. By sending requests to 'index.php' using the parameters option=com jpprojects, view=projects, tmpl=component, and format=json, attackers can retrieve user IDs, names, and email addresses in JSON format.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-359

Related Identifiers

CVE-2019-25762

Affected Products

Joomproject

References · 8

• 🔥 https://exploit-db.com/exploits/46121 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-25762 · Security Note
• https://t.me/cveNotify/171167 · Telegram Post
• https://vulncheck.com/advisories/joomla-component-joomproject-information-disclosure · Note
• https://t.me/cveNotify/171638 · Telegram Post
• https://t.me/CVEtracker/57405 · Telegram Post
• http://joomboost.com · Note
• https://extensions.joomla.org/extensions/extension/clients-a-communities/project-a-task-management/joomproject · Note