CVE-2025-26855 Extension - joomcar.net - SQL injection in Articles Calendar 1.0.0 - 1.0.1.0007 for Joomla

A SQL injection in Articles Calendar extension 1.0.0 - 1.0.1.0007 for Joomla allows attackers to execute arbitrary SQL commands...

CVE-2025-26855 Extension - joomcar.net - SQL injection in Articles Calendar 1.0.0 - 1.0.1.0007 for Joomla

A SQL injection in Articles Calendar extension 1.0.0 - 1.0.1.0007 for Joomla allows attackers to execute arbitrary SQL commands...

CVE-2025-26855

The CVE-2025-26855 entry pertains to a SQL injection in the Joomla plugin/extension “Articles Calendar” (versions 1.0.0 through 1.0.1.0007) by Joomcar Extensions. The vulnerability arises in this extension and allows an attacker to execute arbitrary SQL commands. Affected component: Articles Cale...

PT-2025-30011 · Joomla · Articles Calendar

Name of the Vulnerable Software and Affected Versions: Articles Calendar versions 1.0.0 through 1.0.1.0007 Description: A SQL injection issue exists in the Articles Calendar extension for Joomla. This allows attackers to execute arbitrary SQL commands. Recommendations: Update Articles Calendar to...

Joomcar Extensions Articles Calendar 注入漏洞

Joomcar Extensions Articles Calendar is a Joomla plugin from Joomcar Extensions. A SQL injection vulnerability exists in Joomcar Extensions Articles Calendar versions 1.0.0 through 1.0.1.0007, which stems from vulnerability to SQL injection attacks...

CVE-2025-34113

An authenticated command injection vulnerability exists in Tiki Wiki CMS versions ≤14.1, ≤12.4 LTS, ≤9.10 LTS, and ≤6.14 via the viewmode GET parameter in tiki-calendar.php. When the calendar module is enabled and an authenticated user has permission to access it, an attacker can inject and execu...

CVE-2025-34113 Tiki Wiki CMS Authenticated Command Injection in Calendar Module

An authenticated command injection vulnerability exists in Tiki Wiki CMS versions ≤14.1, ≤12.4 LTS, ≤9.10 LTS, and ≤6.14 via the viewmode GET parameter in tiki-calendar.php. When the calendar module is enabled and an authenticated user has permission to access it, an attacker can inject and execu...

CVE-2025-34113

CVE-2025-34113 describes an authenticated command-injection in Tiki Wiki CMS via the viewmode parameter in tiki-calendar.php. Affected versions are listed as ≤14.1, ≤12.4 LTS, ≤9.10 LTS, and ≤6.14; the calendar module must be enabled and the user must have access permissions. Successful exploitat...

PT-2025-29555 · Unknown · Tiki Wiki Cms

Name of the Vulnerable Software and Affected Versions: Tiki Wiki CMS versions 6.14 and earlier Tiki Wiki CMS versions 9.10 LTS and earlier Tiki Wiki CMS versions 12.4 LTS and earlier Tiki Wiki CMS versions 14.1 and earlier Description: An authenticated command injection vulnerability exists in Ti...

CVE-2021-4458

The Modern Events Calendar Lite plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'wpajaxmecloadsinglepage' AJAX action in all versions up to, and including, 6.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVE-2021-4458

The Modern Events Calendar Lite plugin for WordPress is vulnerable to SQL Injection via the 'id' parameter of the 'wpajaxmecloadsinglepage' AJAX action in all versions up to, and including, 6.3.0 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the...

CVE-2021-4458

The CVE-2021-4458 issue affects the WordPress plugin Modern Events Calendar Lite, version range up to 6.3.0. It is caused by insufficient escaping of the id parameter in the wp_ajax_mec_load_single_page AJAX action, enabling unauthenticated SQL Injection when addslashes is disabled. The vulnerabi...

PT-2025-29321 · WordPress · Modern Events Calendar Lite

Name of the Vulnerable Software and Affected Versions: Modern Events Calendar Lite plugin for WordPress versions prior to 6.4.0 Description: The Modern Events Calendar Lite plugin for WordPress is susceptible to SQL Injection via the id parameter of the /wp ajax mec load single page API endpoint...

WordPress plugin Modern Events Calendar Lite SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A SQL injection vulnerability...

CVE-2023-38327

An issue was discovered in eGroupWare 17.1.20190111. A User Enumeration vulnerability exists under calendar/freebusy.php, which allows unauthenticated remote attackers to enumerate the users of web applications based on server response...

Information Exposure

Overview egroupware/egroupware is a library that extends a classic groupware with an integrated CRM-system, a secure file-server and Collabora Online Office. Affected versions of this package are vulnerable to Information Exposure via the calendar/freebusy.php process. An attacker can obtain a li...

Cross-site Scripting (XSS)

Overview egroupware/egroupware is a library that extends a classic groupware with an integrated CRM-system, a secure file-server and Collabora Online Office. Affected versions of this package are vulnerable to Cross-site Scripting XSS via the user parameter in the calendar/freebusy.php process. A...

PT-2025-29232 · Unknown · Egroupware

Name of the Vulnerable Software and Affected Versions: eGroupWare version 17.1.20190111 Description: An issue exists in eGroupWare that allows for the injection of arbitrary web script or HTML. The vulnerability is a cross-site scripting XSS of the Reflected type and is located in the...

Huawei HarmonyOS and EMUI calendar storage module privilege bypass vulnerability

Huawei EMUI and Huawei HarmonyOS are both products of the Chinese company Huawei Huawei.Huawei EMUI is a mobile operating system based on Android development.Huawei HarmonyOS is an operating system. Provides a full-scenario distributed operating system based on a microkernel. A privilege bypass...

Huawei HarmonyOS and EMUI calendar storage module privilege bypass vulnerability (CNVD-2025-16594)

Huawei EMUI and Huawei HarmonyOS are both products of the Chinese company Huawei Huawei.Huawei EMUI is a mobile operating system based on Android development.Huawei HarmonyOS is an operating system. Provides a full-scenario distributed operating system based on a microkernel. A privilege bypass...