CVE-2009-4938: Warphd Com Jvideo

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in the JVideo! (com_jvideo) component 0.3.11c Beta and 0.3.x for Joomla! allows remote attackers to execute arbitrary SQL commands via the user_id parameter in a user action to index.php.

Affected products

• Warphd Com Jvideo: version 0.3.6 only; version 0.3.8 only; version 0.3.9 only; version 0.3.10 only; version 0.3.11c only

Published 2010-07-22. Last modified 2026-06-16.