CVE-2026-75956
HighCVSS 8.7Summary
The Joomla extension J-BusinessDirectory before version 6.2.3 contains a DoS vulnerability in pagination parameter handling. Pagination values were not strictly typed. Array/non-numeric values (for example limitstart[]) could trigger PHP type errors in arithmetic, and limit was not validated before use in list queries.
Risk Assessment
The risk includes the possibility of causing service disruption by sending malicious requests with invalid pagination parameters, potentially leading to application unavailability.
Recommendation
It is recommended to upgrade the J-BusinessDirectory extension to version 6.2.3 or later, which includes fixes for type and pagination value validation.
Original NVD description (English source)
Joomla Extension - cmsjunkie.com - DOS vector in pagination parameter handling in J-BusinessDirectory < 6.2.3 - Pagination values were not strictly typed. Array/non-numeric values (for example limitstart[]) could trigger PHP type errors in arithmetic, and limit was not validated before use in list queries.