Unauthenticated SQL Injection in JooDatabase Lite by Feenders
CVE-2026-78080

9.3CRITICAL

Key Information:

Vendor: Joodb.feenders.de
Status: Joodatabase Lite Extension For Joomla
Vendor: CVE Published:; 3 September 2026

🔔 Create Joodb.feenders.de Vulnerability Alert

What is CVE-2026-78080?

The JooDatabase Lite extension by Feenders is susceptible to an unauthenticated SQL injection vulnerability due to insufficient validation of the cid parameter in queries. This flaw could allow attackers to manipulate and execute arbitrary SQL commands, potentially compromising the integrity and confidentiality of the database.

Affected Version(s)

JooDatabase Lite extension for Joomla 1.0-5.0.0

References

https://joodb.feenders.de/

product

CVSS V4

Score:

9.3

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Attack Required:

None

Privileges Required:

Undefined

User Interaction:

None

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Sep 3, 2026
Vulnerability Reserved
Aug 22, 2026

Credit

Krzysztof Zając, CERT PL

CVE-2026-78080 Data

JSON