Report: CVE-2018-25348 - Joomla! Component Ek Rishta 2.10 SQL Injection via user_detail (2026)

Report: CVE-2018-25348 - Joomla! Component Ek Rishta 2.10 SQL Injection via user_detail (2026)

CVE ID :CVE-2018-25348 Published : May 23, 2026, 6:30 p.m. | 1 hour, 50 minutes ago Description :Joomla! Component Ek Rishta 2.10 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the cid parameter. Attackers can send GET requests to the user_detail view with malicious cid values containing SQL commands to extract sensitive database information. Severity: 8.8 | HIGH Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
HIGH
Published
May 23, 2026
Affected Product: Joomla
Impact: SQL injection