{"basis":"claimed","id":"CVE-2026-105604","name":"Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3","vendorProject":"dj-extensions.com","product":"DJ-Classifieds extension for Joomla","publishedAt":"2026-11-02","cvss":{"score":9.3,"severity":"CRITICAL","version":"4.0"},"exploited":null,"epss":null,"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}},"title":"Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3","description":"Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3 - The Joomla extension DJ-Classifieds is vulnerable to an unauthenticated SQL injection vector in the frontend search.","cwes":["CWE-89"],"vendors":[{"vendor":"cloudflare","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"aws","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"azure","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"google","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"fastly","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"f5","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"akamai","status":"no_source","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"crs","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]}],"updatedAt":"2026-11-02T21:17:16.933Z","cvssVector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","ssvc":{"exploitation":"none","automatable":"yes","technicalImpact":"total"},"measured":[],"social":{"total":4,"first_seen":"2026-11-02T19:30:19.769Z","daily":[{"day":"2026-10-20","posts":0},{"day":"2026-10-21","posts":0},{"day":"2026-10-22","posts":0},{"day":"2026-10-23","posts":0},{"day":"2026-10-24","posts":0},{"day":"2026-10-25","posts":0},{"day":"2026-10-26","posts":0},{"day":"2026-10-27","posts":0},{"day":"2026-10-28","posts":0},{"day":"2026-10-29","posts":0},{"day":"2026-10-30","posts":0},{"day":"2026-10-31","posts":0},{"day":"2026-11-01","posts":0},{"day":"2026-11-02","posts":4}],"top_posts":[{"source":"x","kind":"post","url":"https://x.com/EnclaveRadar/status/2117397759812644905","author":"EnclaveRadar","author_name":"Enclave Radar","avatar_url":"https://pbs.twimg.com/profile_images/2116963272138121217/F3O3nWOo_bigger.jpg","text":"🆕 New CVE: CVE-2026-105604 (CVSS 9.3)\nhttps://t.co/cAu22IedE0 DJ-Classifieds extension for Joomla · SQL injection\nRemote, no login needed.\n\nJoomla Extension - https://t.co/cAu22IedE0 - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3 - The Joomla extension…","engagement":0,"posted_at":"2026-11-02T23:25:39.000Z"},{"source":"bluesky","kind":"post","url":"https://bsky.app/profile/stackflag.bsky.social/post/3mze5jivpq72n","author":"stackflag.bsky.social","author_name":"STACKFLAG","avatar_url":"https://cdn.bsky.app/img/avatar/plain/did:plc:zhe53h7ajlloep2oso5pqxzj/bafkreigtuhh5jkztpd2jbpwmsgwljrln6miskcl62es3xsgiziejo5gdve","text":"CVE-2026-105604 - dj-classifieds extension for joomla\nThe DJ-Classifieds add‑on for Joomla lets anyone on the public website send specially crafted search requests that cause the site’s database to run unexpected commands.…\n\nToo many irrelevant or confusing CVEs? Use stackflag.c…","engagement":0,"posted_at":"2026-11-02T20:20:00.000Z"},{"source":"bluesky","kind":"post","url":"https://bsky.app/profile/stemshop.bsky.social/post/3mze4trvzpc25","author":"stemshop.bsky.social","author_name":"stemshop.bsky.social","avatar_url":"https://cdn.bsky.app/img/avatar/plain/did:plc:6zpzsab44xavrl46jqvba5wb/bafkreid2zcmne7vr45ck2bkvmhnf4occned3jmavshzk2fh5j5qpbtluja","text":"🚨 CVE-2026-105604 — CVSS 9.3 CRITICAL\n\nJoomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3 - The Jooml...\n\n🔎 https://stemshop.top/cve/CVE-2026-105604\n\n#CVE #CyberSecurity #InfoSec","engagement":0,"posted_at":"2026-11-02T20:07:52.000Z"},{"source":"bluesky","kind":"post","url":"https://bsky.app/profile/cve.skyfleet.blue/post/d3sdk634bfk5k","author":"cve.skyfleet.blue","author_name":"CVE Alerts ","avatar_url":"https://cdn.bsky.app/img/avatar/plain/did:plc:myutg2pwkjbukv7pq2hp5mtl/bafkreidzrx72dabuipp2ej2gldupqzv5nbtbez7tv4n26ekzjsot6ocdam","text":"CVE-2026-105604 - Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds\nCVE ID : CVE-2026-105604\n \n Published : Nov. 2, 2026, 6:27 p.m. | 37 minutes ago\n \n Description : Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ...","engagement":0,"posted_at":"2026-11-02T19:30:19.769Z"}],"exploit_repositories":[]}}