CVE-2026-75956: Joomla Extension - cmsjunkie.com - DOS vector in pagination parameter handling in J-BusinessDirectory < 6.2.3
Joomla Extension - cmsjunkie.com - DOS vector in pagination parameter handling in J-BusinessDirectory < 6.2.3 - Pagination values were not strictly typed. Array/non-numeric values (for example limitstart[]) could trigger PHP type errors in arithmetic, and limit was not validated before use in list queries.
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
Joomla sites using J-BusinessDirectory versions earlier than 6.2.3 are affected where pagination parameters reach the extension's listing functionality.
What does an attacker need to exploit it?
An attacker needs to submit malformed pagination input, such as an array or non-numeric value in limitstart[]. The issue can trigger PHP type errors during pagination arithmetic or affect list-query handling through an unvalidated limit value.
What is the impact of successful exploitation?
The reported impact is denial of service. Malformed pagination values can cause PHP type errors and disrupt affected listing requests.
How can I determine whether my site is affected?
Check the installed J-BusinessDirectory version. Versions earlier than 6.2.3 are within the affected range; application logs may also show PHP type errors associated with malformed pagination parameters such as limitstart[].