Improper handling of identifiers lead to a SQL injection vulnerability in the quoteNameStr method of the database package. Please note: the affected method is a protected method. It has no usages in the original packages in neither the 2.x nor 3.x branch and therefore the vulnerability in question can not be exploited when using the original database class. However, classes extending the affected class might be affected, if the vulnerable method is used.

According to its self-reported version, the instance of Joomla! running on the remote web server is 4.x prior to 4.4.13 or 5.x prior to 5.2.6. It is, therefore, affected by multiple vulnerabilities.

- Improper handling of identifiers lead to a SQL injection vulnerability in the quoteNameStr method of the database package. (CVE-2025-25226)

- Insufficient state checks lead to a vector that allows to bypass 2FA checks. (CVE-2025-25227)

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Improper handling of identifiers lead to a SQL injection vulnerability in the quoteNameStr method of the
    database package. Please note: the affected method is a protected method. It has no usages in the original
    packages in neither the 2.x nor 3.x branch and therefore the vulnerability in question can not be
    exploited when using the original database class. However, classes extending the affected class might be
    affected, if the vulnerable method is used. (CVE-2025-25226)

ID	Name	Product	Family	Type	Severity
114774	Joomla! 4.x < 4.4.13 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	medium
114773	Joomla! 5.x < 5.2.6 Multiple Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	medium
424810	SCA: security update for joomla/database (GHSA-44v2-prcf-pc3m)	Tenable Cloud Security	SCA Checks	Local	medium
424810	SCA: security update for joomla/database (GHSA-44v2-prcf-pc3m)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2025-25226

medium

Tenable Plugins

medium

medium

medium

medium