CVE-2010-4795

CVE-2010-4795: A SQL injection vulnerability affects the Joomla! JS Calendar (com_jscalendar) component versions 1.5.1 and 1.5.4. The flaw allows remote attackers to execute arbitrary SQL commands via the ev_id parameter in a details action to index.php. Underlying issue is improper handling of u...

CVE-2010-4794

Summary (CVE-2010-4794) : The Joomla! component JoomlaSeller JS Calendar (com_jscalendar) for Joomla! versions 1.5.1 and 1.5.4 contains multiple XSS vulnerabilities. An attacker can inject arbitrary JavaScript/HTML via the (1) month and (2) year parameters in a jscalendar action to index.php, ena...