CVE-2019-25750
HIGH
NVD
CVSS Score
8.2
Severity
HIGH
Published
Jun 19, 2026
Vendor
unknown
Description
Joomla Component J-MultipleHotelReservation 6.0.7 contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the hotel_id parameter. Attackers can send POST requests to the search-hotels endpoint with crafted SQL UNION SELECT statements to extract sensitive database information including table names and column data.