EQ Event Calendar Component SQL Injection Vulnerability in Joomla!

Joomla! is the U.S. Open Source Matters team developed a set of open source content management system CMS, the system provides RSS feeds , site search and other features . EQ Event Calendar is one of the event calendar component . A SQL injection vulnerability exists in the EQ Event Calendar...

CVE-2015-4654

SQL injection vulnerability in the EQ Event Calendar component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to eqfullevent...

Sql injection

SQL injection vulnerability in the EQ Event Calendar component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to eqfullevent...

CVE-2015-4654

CVE-2015-4654 describes an SQL injection vulnerability in the Joomla! EQ Event Calendar component. The issue stems from inadequate filtering of the id parameter to eqfullevent, allowing remote attackers to execute arbitrary SQL commands. Documented references indicate this affects the EQ Event Ca...

CVE-2015-4654

SQL injection vulnerability in the EQ Event Calendar component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to eqfullevent...

"EQ Event Calendar" [com_eqfullevent] , 1.0.0 and below

"EQ Event Calendar" by byeqima.com - version: 1.0.0 and lower SQL injection vulnerability...

Joomla EQ Event Calendar SQL Injection

Exploit Title : Joomla component EQ Event Calendar SQL Injection vulnerability Author : Manish Kishan Tanwar AKA error1046 Vendor Link : http://codecanyon.net/item/eq-event-calendar-/11169564 Date : 7/06/2015 Discovered at : IndiShell Lab Love to : zero cool,Team indishell,Mannu,Viki,Hardeep...

WordPress All in One Event Calendar Plugin <= 1.9 - SQL Injection

This plugin is prone to index.php multiple parameter SQL injection vulnerability. Solution Update the plugin...

WordPress Spider Event Calendar Plugin - Multiple Vulnerabilities

This plugin is prone to security bypass, cross site scripting and SQL injection vulnerabilities. Solution Update the plugin...

WordPress CP Multi View Event Calendar 1.1.4 SQL Injection

SQL Injection vulnerability in CP Multi View Event Calendar plugin Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

WordPress PHP Event Calendar 1.5 Arbitrary File Upload

Exploit Title: Wordpress PHP Event Calendar Plugin - Arbitrary File Upload Google Dork: inurl:/plugins/php-event-calendar/ Date: 02.04.2015 Exploit Author: CrashBandicot @DosPerl Source Plugin: https://wordpress.org/plugins/php-event-calendar/ Vendor HomePage: http://phpeventcalendar.com/ Version...

PHP Event Calendar <= 1.5 - Arbitrary File Upload

The php-event-calendar WordPress plugin was affected by an Arbitrary File Upload security vulnerability...

WordPress PHP Event Calendar Plugin <= 1.5 - Arbitrary File Upload

This plugin is prone to an arbitrary file upload vulnerability via "uploadify.php" file. Solution Update the plugin...

CP Multi View Event Calendar WordPress Plugins 1.1.4 - SQL Injection vulnerabilities

Exploit for php platform in category web applications Exploit Title: WordPress: cp-multi-view-calendar.1.1.4 SQL Injection vulnerabilities Date: 2015-02-28 Google Dork: Index of /wordpress/wp-content/plugins/cp-multi-view-calendar Exploit Author: Joaquin Ramirez Martinez i0akiN SEC-LABORATORY...

WordPress Webdorado Spider Event Calendar SQL Injection

WordPress Spider Event Calendar is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

WordPress Plugin Spider Event Calendar SQL Injection Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports in PHP and MySQL server to set up a personal blog site . Spider Event Calendar is one of the highly configurable calendar plugin . A SQL injection vulnerability exist...

CVE-2015-2196

SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the catid parameter in a spiderbigcalendarmonth action to wp-admin/admin-ajax.php...

Sql injection

SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the catid parameter in a spiderbigcalendarmonth action to wp-admin/admin-ajax.php...

CVE-2015-2196

SQL injection vulnerability in Spider Event Calendar 1.4.9 for WordPress allows remote attackers to execute arbitrary SQL commands via the catid parameter in a spiderbigcalendarmonth action to wp-admin/admin-ajax.php...

CVE-2015-2196

The CVE-2015-2196 issue affects WordPress Spider Event Calendar plugin (versions up to 1.4.9). The vulnerability arises in the spiderbigcalendar_month action when processing the cat_id parameter in wp-admin/admin-ajax.php, allowing an attacker to perform SQL injection. Impact described across sou...