PT-2011-1743

Name of the Vulnerable Software and Affected Versions Joomla! component com jscalendar versions 1.5.1 through 1.5.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the ev id parameter in a details action to the "index.php" endpoint...