{"data":{"id":"CVE-2025-49467","cve_id":"CVE-2025-49467","title":"A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered.","summary":"A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered.","severity":"CRITICAL","cvss":{"score":9.3,"version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:Amber","source":"nvd"},"published_at":"2025-06-12T16:15:23.363000Z","modified_at":"2026-06-17T09:31:21.637000Z","withdrawn_at":null,"is_joomla":true,"is_joomla_core":false,"relevance":"certain","product":"JEvents","extension":{"type":"component","name":"JEvents"},"sources":["nvd"],"source_count":1,"url":"https://cve.oyer.fr/cve/CVE-2025-49467","description":"A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges.","cwe":["CWE-89"],"affected":[{"package":"com_jevents","product":"JEvents component for Joomla","vendor":"jevents.net / GWE Systems Ltd","ecosystem":null,"cpe":null,"version_start":"1.0.0","version_end":"3.6.82","version_end_inclusive":true,"fixed_version":null,"type":"component","source":"nvd"},{"package":"com_jevents","product":"JEvents component for Joomla","vendor":"jevents.net / GWE Systems Ltd","ecosystem":null,"cpe":null,"version_start":"3.6.83","version_end":"3.6.87","version_end_inclusive":true,"fixed_version":null,"type":"component","source":"nvd"}],"references":[{"url":"https://jevents.net/","title":null,"source":"nvd"}],"source_records":[{"source":"nvd","external_id":"CVE-2025-49467","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-49467","severity":"CRITICAL","cvss_score":9.3,"cvss_vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:X/RE:X/U:Amber","cvss_version":"4.0","first_seen_at":"2026-09-26T09:34:25.123381Z","last_seen_at":"2026-09-26T09:34:25.123381Z"}],"history":[{"at":"2026-09-26T09:34:25.123381Z","event":"created","source":"nvd","detail":"Détectée via nvd"}]}}