Joomla JE Photo Gallery 1.1 SQL Injection via categoryid

Published 5 mo ago 2026-06-01 · modified 3 mo ago 2026-07-22 · JSON

CVSS

8.2

v3.1 · CNA

CISA KEV

not known exploited

EPSS

0.3%

percentile 28%

Public exploits

none known

Joomla Component JE Photo Gallery 1.1 contains an SQL injection vulnerability that allows unauthenticated attackers to extract database information by injecting malicious SQL code through the categoryid parameter. Attackers can send GET requests to index.php with crafted categoryid values in the com_jephotogallery component to execute arbitrary SQL queries and retrieve sensitive data like usernames and password hashes.

CISA SSVC assessment

Exploitation: Proof of concept public
Automatable: yes
Technical impact: partial
Assessed: 5 mo ago 2026-06-02

Exploit prediction (EPSS)

0.34% probability of exploitation in the next 30 days, higher than 28% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
CNA	4.0	8.8	`CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N`
CNA	3.1	8.2	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N`
CNA	4.0	8.8	`CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X`
CNA	3.1	8.2	`CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N`

Affected products

Joomlaextensions JE Photo Gallery

Classification

Weakness

CWE-89 Improper Neutralization of Special Elements used in an SQL Command

References

exploit-db.com /exploits/45930 · exploit
joomlaextensions.co.in · product
joomlaextensions.co.in /download/1387375463_JE%20PhotoGallery%20(%20J-%203.0%20).zip · product
vulncheck.com /advisories/joomla-je-photo-gallery-sql-injection-via-categoryid · third-party-advisory

Sources

CVE List: CVE-2018-25433
NVD: CVE-2018-25433

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.

Summary