Sql injection

SQL injection vulnerability in the Eventing comeventing 1.6.x component for Joomla! allows remote attackers to execute arbitrary SQL commands via the catid parameter to index.php...

Eventing Component for Joomla! 'catid' Parameter SQLi

The version of the Eventing component for Joomla! running on the remote host is affected by a SQL injection vulnerability in eventing.php due to improper sanitization of user-supplied input to the 'catid' parameter before using it to construct database queries. Regardless of the PHP...