SQL Injection Vulnerability in EDocman Extension for Joomla by JoomDonation
CVE-2026-57832

8.7HIGH

Key Information:

Vendor

Joomdonation.com

Status
Edocman Extension For Joomla
Vendor
CVE Published:
15 July 2026

What is CVE-2026-57832?

The EDocman extension for Joomla, developed by JoomDonation, contains a vulnerability that allows attackers to perform unauthenticated SQL injection. This flaw can be exploited to execute arbitrary SQL queries against the application's database, potentially leading to data breaches, unauthorized data manipulation, or complete control over the database. Website administrators are advised to review their EDocman installations and apply necessary security patches to mitigate this risk.

Affected Version(s)

EDocman extension for Joomla 1.0-3.8

References

https://joomdonation.com/joomla-extensions/edocman-joomla...
product

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Phil Taylor
.