CVE-2010-4993

SQL injection vulnerability in the eventcal comeventcal component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php...

CVE-2010-4993

CVE-2010-4993 is a confirmed SQL injection in the Joomla! eventcal (com_eventcal) component version 1.6.4. The vulnerability arises in the Itemid parameter sent to index.php, enabling remote attackers to inject arbitrary SQL commands. Affected product: Joomla! environment with com_eventcal 1.6.4....