CVE-2018-25433 Joomla JE Photo Gallery 1.1 SQL Injection via categoryid

HighCVSS 8.8 EPSS 0.34%

Published: 2026-06-02 00:00
Updated: 2026-07-22 11:10
Exploit status: No public exploit known

Description

Joomla Component JE Photo Gallery 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting malicious SQL code through the categoryid parameter. Attackers can send GET requests to index.php with crafted categoryid values in the com_jephotogallery component to execute arbitrary SQL queries and retrieve sensitive data like usernames and password hashes.

Affected products

Product	Affected versions	Fixed in
joomlaextensions JE Photo Gallery	= 1.1	No fix listed

References

ExploitDB-45930 exploit
Official Product Homepage product
Product Reference product
VulnCheck Advisory: Joomla JE Photo Gallery 1.1 SQL Injection via categoryid third-party-advisory

CVSS v4.0

8.8 High

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N

Attack Vector: Network
Attack Complexity: Low
Attack Requirements: None
Privileges Required: None
User Interaction: None
Vulnerable System Confidentiality: High
Vulnerable System Integrity: Low
Vulnerable System Availability: None
Subsequent System Confidentiality: None
Subsequent System Integrity: None
Subsequent System Availability: None

All scores (4)

v4.0 8.8 · vulncheck
v4.0 8.8 · disclosure@vulncheck.com
v3.1 8.2 · vulncheck
v3.1 8.2 · disclosure@vulncheck.com

Weakness & likelihood

EPSS (exploitation probability, 30 days): 0.34% (percentile 28.0)
CWE: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.