Lucene search
K

26 matches found

RedhatCVE
RedhatCVE
added 2026/01/09 11:45 a.m.7 views

CVE-2010-0635

SQL injection vulnerability in the plgSearchEventsearch::onSearch method in eventsearch.php in the JEvents Search plugin 1.5 through 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some of these details are obtained from third party...

7.5CVSS8.8AI score0.00413EPSS
Exploits0References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2010-0666

Malware in sbrugna...

7.5CVSS6.4AI score0.00413EPSS
Exploits0References4
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-18196

Malicious code in bioql PyPI...

9.3CVSS6.6AI score0.00224EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/06/14 4:3 p.m.2 views

CVE-2025-49467

A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges...

9.3CVSS7.4AI score0.00224EPSS
Exploits0References1
NVD
NVD
added 2025/06/12 4:15 p.m.11 views

CVE-2025-49467

A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges...

9.3CVSS0.00224EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/12 3:18 p.m.7 views

CVE-2025-49467 Joomla Extension - jevents.net - SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla

A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges...

9.3CVSS8.1AI score0.00224EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/12 3:18 p.m.13 views

CVE-2025-49467 Joomla Extension - jevents.net - SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla

A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges...

9.3CVSS0.00224EPSS
Exploits0References1
CVE
CVE
added 2025/06/12 3:18 p.m.50 views

CVE-2025-49467

CVE-2025-49467 describes a SQL injection in the JEvents Joomla extension. Affected: JEvents component for Joomla versions prior to 3.6.88 and prior to 3.6.82.1. Root cause: vulnerability in publicly accessible actions that list events by date ranges, allowing injection through the date-range quer...

9.3CVSS8.1AI score0.00224EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/12 12:0 a.m.2 views

GWE JEvents SQL注入漏洞

GWE JEvents is a plugin from GWE UK for Joomla! A SQL injection vulnerability exists in GWE JEvents versions prior to 3.6.88 and 3.6.82.1, which stems from a SQL injection in the publicly accessible date range query function...

9.3CVSS7.8AI score0.00224EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/06/12 12:0 a.m.1 views

PT-2025-25333 · Joomla · Jevents

Name of the Vulnerable Software and Affected Versions: JEvents component for Joomla versions prior to 3.6.88 JEvents component for Joomla versions prior to 3.6.82.1 Description: A SQL injection vulnerability in the JEvents component for Joomla was discovered, allowing unauthorized access to data...

9.3CVSS7.3AI score0.00224EPSS
Exploits0References9
RedhatCVE
RedhatCVE
added 2025/05/22 6:52 a.m.2 views

CVE-2015-7340

JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action...

7.2CVSS8.2AI score0.00274EPSS
Exploits1References1
Prion
Prion
added 2020/03/09 5:15 p.m.7 views

Sql injection

JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action...

6.5CVSS8.5AI score0.00274EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2020/03/09 4:21 p.m.50 views

CVE-2015-7340

The CVE-2015-7340 entry concerns the JEvents Joomla Component prior to version 3.4.0 RC6, which is reported to be vulnerable to SQL Injection via the evid parameter in the Manage Events action. The vulnerability stems from an input vector in the Manage Events workflow that allows an attacker to i...

7.2CVSS7.5AI score0.00274EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2020/03/09 4:21 p.m.12 views

CVE-2015-7340

JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action...

7.4AI score0.00274EPSS
Exploits1References1
Joomla! Vulnerable Extensions List
Joomla! Vulnerable Extensions List
added 2019/03/17 4:57 p.m.11 views

Jevents 3.4.49 Various

Jevents 3.4.49 Various UpdateNotice URL https://www.jevents.net/blog/jevents-3-4-50-released-all-users-should-upgrade...

0.4AI score
Exploits0
Packet Storm
Packet Storm
added 2019/01/31 12:0 a.m.198 views

Joomla JEvents 3.4.47 SQL Injection

Exploit Title : Joomla JEvents Components 3.4.47 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 31/01/2019 Vendor Homepage : jevents.net Software Download Link : jevents.net/download-area/jevents Software Information Link :...

0.2AI score
Exploits0
Joomla! Vulnerable Extensions List
Joomla! Vulnerable Extensions List
added 2015/09/03 12:0 a.m.27 views

JEvents, pre 3.2.20

Extension: JEvents from jevents.net Vulnerability: SQL injection Versions affected prior to 3.2.20 Resolution: update to 3.2.20 - JEvents 3.4.0RC6 is also available for Joomla 3.4+ which fixes the same security issue. Update notice URL: https://www.jevents.net/component/zoo/item/jevents-33...

2.7AI score
Exploits0References3Affected Software1
Joomla! Vulnerable Extensions List
Joomla! Vulnerable Extensions List
added 2015/01/19 12:0 a.m.14 views

JEvents pre 3.1.37

Version 3.1.37 eliminates a low risk theoretical XSS exploit and SQL injection exploit. UpdateNoticeURL https://www.jevents.net/jevnews/234-jevents-32 ttweetfsubscribe...

1.4AI score
Exploits0References2Affected Software1
OpenVAS
OpenVAS
added 2013/01/29 12:0 a.m.20 views

Joomla! JEvents Component SQLi Vulnerability

Joomla! with JEvents component is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

7.5CVSS5.5AI score0.00413EPSS
Exploits0References4
Packet Storm
Packet Storm
added 2013/01/08 12:0 a.m.39 views

Joomla JEvents 1.5.0 SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: Ur0b0r0x Tiwtte: @Ur0b0r0x Email: [email protected] Line: GreyHat Home: ur0b0r0x.blogspot.com Exploit Title: Joomla Component - JEvents 1.5.0 Sql Injectio...

0.4AI score
Exploits0
Rows per page
Query Builder