The Joomla Component JE Photo Gallery 1.1 contains a flaw that allows attackers to inject arbitrary SQL code through the categoryid parameter. Because the parameter is passed directly into database queries without proper sanitization, any user can craft a GET request to the component’s index.php and retrieve sensitive database content such as usernames and password hashes. This type of flaw is classified as an injection weakness (CWE-89).

The vulnerability affects installations of the Joomlaextension JE Photo Gallery at version 1.1. Users running this specific component should verify their installation version and vendor product.

The CVSS score is 8.8, indicating high severity, and the EPSS score is not available. The flaw is not listed in the CISA KEV catalog. An attacker can exploit the flaw by sending an unauthenticated HTTP GET request to index.php with a malicious categoryid parameter, granting the ability to read database contents. The lack of an authentication requirement and the need for only an HTTP request make the threat model straightforward but serious.