Description

SQL injection vulnerability in the EQ Event Calendar component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to eqfullevent.

Remediation

References

CVE-2015-4654

Related Vulnerabilities

WordPress Plugin SiteGuard WP Information Disclosure (1.7.6)

WordPress Plugin Velvet Blues Update URLs Unspecified Vulnerability (2.1)

Python Untrusted Search Path Vulnerability (CVE-2008-5983)

MODX Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-6588)

Drupal Core 8.5.x Remote Code Execution (8.5.0 - 8.5.10)

Severity

High

Classification

CVE-2015-4654 CWE-138

Tags

Missing Update Known Vulnerabilities