CVE-2018-6397

Directory Traversal exists in the Picture Calendar 3.1.4 component for Joomla! via the list.php folder parameter...

Sql injection

SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load action...

CVE-2018-6397

CVE-2018-6397 concerns Joomla! Picture Calendar 3.1.4 (component com_picturecalendarforjoomla) with a directory traversal flaw exploitable through the list.php folder parameter. Connected advisories confirm a vulnerability in the Picture Calendar 3.1.4 component allowing remote attackers to view ...

CVE-2018-6395

The CVE-2018-6395 entry concerns the Joomla! Visual Calendar component. The vulnerability is an SQL injection in the com_visualcalendar Visual Calendar 3.1.3 (and earlier) via the id parameter in a view=load action, enabling a remote attacker to inject arbitrary SQL commands. The issue is documen...

CVE-2018-6395

SQL Injection exists in the Visual Calendar 3.1.3 component for Joomla! via the id parameter in a view=load action...

CVE-2018-6398

CVE-2018-6398 concerns the Joomla CP Event Calendar component (v3.0.1 and earlier). The vulnerability is a SQL injection in the id parameter of a task=load request, allowing an attacker to inject arbitrary SQL commands on the remote Joomla site. Connected advisories corroborate the issue and cite...

CVE-2018-6398

SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load action...

CVE-2018-6397

Directory Traversal exists in the Picture Calendar 3.1.4 component for Joomla! via the list.php folder parameter...

Joomla! Visual Calendar 3.1.3 SQL Injection

Exploit Title: Joomla! Component Visual Calendar 3.1.3 - SQL Injection Dork: N/A Date: 30.01.2018 Vendor Homepage: http://www.joomlacalendars.com/ Software Link: https://extensions.joomla.org/extensions/extension/calendars-a-events/events/visual-calendar/ Version: 3.1.3 Category: Webapps Tested o...

Joomla Picture Calendar for Joomla 3.1.4 Component - Directory Traversal Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Picture Calendar for Joomla 3.1.4 - Directory Traversal Dork: N/A Date: 30.01.2018 Vendor Homepage: http://www.joomlacalendars.com/ Software Link:...

Joomla CP Event Calendar 3.0.1 Component - id SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component CP Event Calendar 3.0.1 - SQL Injection Dork: N/A Date: 30.01.2018 Vendor Homepage: http://www.joomlacalendars.com/ Software Link:...

Joomla! CP Event Calendar 3.0.1 SQL Injection

Exploit Title: Joomla! Component CP Event Calendar 3.0.1 - SQL Injection Dork: N/A Date: 30.01.2018 Vendor Homepage: http://www.joomlacalendars.com/ Software Link: https://extensions.joomla.org/extensions/extension/calendars-a-events/events/cp-event-calendar/ Version: 3.0.1 Category: Webapps Test...

Joomla! Component Visual Calendar 3.1.3 - id SQL Injection

Joomla! Component Visual Calendar 3.1.3 - id SQL Injection Exploit Title: Joomla! Component Visual Calendar 3.1.3 - SQL Injection Dork: N/A Date: 30.01.2018 Vendor Homepage: http://www.joomlacalendars.com/ Software Link:...

Joomla! Component Picture Calendar for Joomla 3.1.4 - Directory Traversal

Joomla! Component Picture Calendar for Joomla 3.1.4 - Directory Traversal Exploit Title: Joomla! Component Picture Calendar for Joomla 3.1.4 - Directory Traversal Dork: N/A Date: 30.01.2018 Vendor Homepage: http://www.joomlacalendars.com/ Software Link:...

Joomla Visual Calendar 3.1.3 Component - id SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla! Component Visual Calendar 3.1.3 - SQL Injection Dork: N/A Date: 30.01.2018 Vendor Homepage: http://www.joomlacalendars.com/ Software Link:...

Joomla! Component CP Event Calendar 3.0.1 - id SQL Injection

Joomla! Component CP Event Calendar 3.0.1 - id SQL Injection Exploit Title: Joomla! Component CP Event Calendar 3.0.1 - SQL Injection Dork: N/A Date: 30.01.2018 Vendor Homepage: http://www.joomlacalendars.com/ Software Link:...

Joomla! Component Visual Calendar 3.1.3 - 'id' SQL Injection

Exploit Title: Joomla! Component Visual Calendar 3.1.3 - SQL Injection Dork: N/A Date: 30.01.2018 Vendor Homepage: http://www.joomlacalendars.com/ Software Link: https://extensions.joomla.org/extensions/extension/calendars-a-events/events/visual-calendar/ Version: 3.1.3 Category: Webapps Tested o...

Joomla! Component Picture Calendar for Joomla! 3.1.4 - Directory Traversal

Exploit Title: Joomla! Component Picture Calendar for Joomla 3.1.4 - Directory Traversal Dork: N/A Date: 30.01.2018 Vendor Homepage: http://www.joomlacalendars.com/ Software Link: https://extensions.joomla.org/extensions/extension/calendars-a-events/events/picture-calendar-for-joomla/ Version:...

Joomla! Picture Calendar For Joomla 3.1.4 Directory Traversal

Exploit Title: Joomla! Component Picture Calendar for Joomla 3.1.4 - Directory Traversal Dork: N/A Date: 30.01.2018 Vendor Homepage: http://www.joomlacalendars.com/ Software Link: https://extensions.joomla.org/extensions/extension/calendars-a-events/events/picture-calendar-for-joomla/ Version:...

calendar.massagetoday.com XSS vulnerability

Open Bug Bounty ID: OBB-549393 Description| Value ---|--- Affected Website:| calendar.massagetoday.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...