32 matches found
CVE-2010-0635
SQL injection vulnerability in the plgSearchEventsearch::onSearch method in eventsearch.php in the JEvents Search plugin 1.5 through 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some of these details are obtained from third party...
EUVD-2010-0666
Malware in sbrugna...
EUVD-2025-18196
Malicious code in bioql PyPI...
The vulnerability of the JEvents component of the Joomla! content management system allows a hacker to execute arbitrary code.
The vulnerability of the JEvents component in the Joomla! content management system is related to the lack of protective measures for the website structure. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2025-49467
A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges...
CVE-2025-49467
A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges...
CVE-2025-49467 Joomla Extension - jevents.net - SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla
A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges...
CVE-2025-49467 Joomla Extension - jevents.net - SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla
A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges...
CVE-2025-49467
CVE-2025-49467 describes a SQL injection in the JEvents Joomla extension. Affected: JEvents component for Joomla versions prior to 3.6.88 and prior to 3.6.82.1. Root cause: vulnerability in publicly accessible actions that list events by date ranges, allowing injection through the date-range quer...
GWE JEvents SQL注入漏洞
GWE JEvents is a plugin from GWE UK for Joomla! A SQL injection vulnerability exists in GWE JEvents versions prior to 3.6.88 and 3.6.82.1, which stems from a SQL injection in the publicly accessible date range query function...
PT-2025-25333 · Joomla · Jevents
Name of the Vulnerable Software and Affected Versions: JEvents component for Joomla versions prior to 3.6.88 JEvents component for Joomla versions prior to 3.6.82.1 Description: A SQL injection vulnerability in the JEvents component for Joomla was discovered, allowing unauthorized access to data...
CVE-2025-49467: Improper Neutralization of Special Elements used in an SQL Command
A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges...
CVE-2015-7340
JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action...
Sql injection
JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action...
CVE-2015-7340
The CVE-2015-7340 entry concerns the JEvents Joomla Component prior to version 3.4.0 RC6, which is reported to be vulnerable to SQL Injection via the evid parameter in the Manage Events action. The vulnerability stems from an input vector in the Manage Events workflow that allows an attacker to i...
CVE-2015-7340
JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action...
CVE-2015-7340
JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action...
CVE-2015-7340: Improper Neutralization of Special Elements used in an SQL Command
JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action...
PT-2020-7884
Name of the Vulnerable Software and Affected Versions: JEvents Joomla Component versions prior to 3.4.0 RC6 Description: The issue is related to SQL Injection via the evid variable in a Manage Events action. This allows for potential exploitation. Recommendations: For versions prior to 3.4.0 RC6,...
