What is GHSA-q56p-mhpj-p263?

GHSA-q56p-mhpj-p263 is a security advisory published by GitHub Security Advisories with High severity. Joomla! Component vBizz 1.0.7 contains an SQL injection vulnerability that allows authenticated...

Which CVE IDs does GHSA-q56p-mhpj-p263 cover?

GHSA-q56p-mhpj-p263 covers the following CVE IDs: CVE-2019-25759. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-q56p-mhpj-p263?

GHSA-q56p-mhpj-p263 has a CVSS v3 base score of 7.1, published by GitHub Security Advisories.

GHSA-q56p-mhpj-p263HighCVSS 7.1

Joomla! Component vBizz 1.0.7 contains an SQL injection vulnerability that allows authenticated...

Vendor

GitHub Security Advisories

Published

June 19, 2026

Last Modified

June 19, 2026

🔗 CVE IDs covered (1)

CVE-2019-25759 →

📋 Description

Joomla! Component vBizz 1.0.7 contains an SQL injection vulnerability that allows authenticated attackers to execute arbitrary SQL queries by injecting malicious code through the payid parameter. Attackers can submit POST requests to the employee management interface with crafted payid array values containing SQL commands to extract sensitive database information including version and database names.

🔗 References (6)

https://nvd.nist.gov/vuln/detail/CVE-2019-25759
https://extensions.joomla.org/extensions/extension/marketing/crm/vbizz
https://www.exploit-db.com/exploits/46223
https://www.vulncheck.com/advisories/joomla-component-vbizz-sql-injection
http://wdmtech.com
https://github.com/advisories/GHSA-q56p-mhpj-p263