joombooking vulnerabilities

Products

• jb bus 1
• JB Visa 1

Latest joombooking CVEs

Newest publication first

1. CVE-2017-20255 Joomla! Component JB Visa 1.0 SQL Injection via visatype

   Published 2026-06-19

   High·CVSS 8.8 EPSS 0.49%

   Joomla! Component JB Visa 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the visatype parameter. Attackers can send GET requests to index.php with the option=com_bookpro and vi...

2. CVE-2018-6372 SQL Injection exists in the JB Bus 2.3 component for Joomla! via the order_number parameter.

   Published 2018-02-17

   Critical·CVSS 9.8 EPSS 2.7%

   SQL Injection exists in the JB Bus 2.3 component for Joomla! via the order_number parameter.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.