VULNERABILITY INTELLIGENCE

CVE-2016-10114

CVSS score9.8 CRITICAL

EPSS probability2.45%

CISA KEVNot currently listed

Published2017-01-04

Last modified2026-06-17

Description

SQL injection vulnerability in the "aWeb Cart Watching System for Virtuemart" extension before 2.6.1 for Joomla! allows remote attackers to execute arbitrary SQL commands via vectors involving categorysearch and smartSearch.