CVE-2016-1000271

DT Register for Joomla (extensions DT Register) contains an SQL injection in the calendar events endpoint. Affected versions are Joomla 3.x: before 3.1.12 and Joomla 2.5: before 2.8.18. The vulnerability arises in the URL path /index.php?controller=calendar&format=raw&cat[0]=SQLi&task=events, whe...

CVE-2016-1000271

Joomla extension DT Register version before 3.1.12 Joomla 3.x / 2.8.18 Joomla 2.5 contains an SQL injection in "/index.php?controller=calendar&format=raw&cat0=SQLi&task=events". This attack appears to be exploitable if the attacker can reach the web server...