Description

SQL injection vulnerability in the EQ Event Calendar component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to eqfullevent.

Remediation

References

CVE-2015-4654

Related Vulnerabilities

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-6297)

WordPress Plugin Soundy Audio Playlist Cross-Site Scripting (4.6)

Atlassian Jira Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-18113)

Moodle URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2019-14831)

MySQL Other Vulnerability (CVE-2004-0837)

Severity

High

Classification

CVE-2015-4654 CWE-138

Tags

Missing Update Known Vulnerabilities