26 matches found
CVE-2010-0635
SQL injection vulnerability in the plgSearchEventsearch::onSearch method in eventsearch.php in the JEvents Search plugin 1.5 through 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some of these details are obtained from third party...
EUVD-2010-0666
Malware in sbrugna...
EUVD-2025-18196
Malicious code in bioql PyPI...
CVE-2025-49467
A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges...
CVE-2025-49467
A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges...
CVE-2025-49467 Joomla Extension - jevents.net - SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla
A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges...
CVE-2025-49467 Joomla Extension - jevents.net - SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla
A SQL injection vulnerability in JEvents component before 3.6.88 and 3.6.82.1 for Joomla was discovered. The extension is vulnerable to SQL injection via publicly accessible actions to list events by date ranges...
CVE-2025-49467
CVE-2025-49467 describes a SQL injection in the JEvents Joomla extension. Affected: JEvents component for Joomla versions prior to 3.6.88 and prior to 3.6.82.1. Root cause: vulnerability in publicly accessible actions that list events by date ranges, allowing injection through the date-range quer...
GWE JEvents SQL注入漏洞
GWE JEvents is a plugin from GWE UK for Joomla! A SQL injection vulnerability exists in GWE JEvents versions prior to 3.6.88 and 3.6.82.1, which stems from a SQL injection in the publicly accessible date range query function...
PT-2025-25333 · Joomla · Jevents
Name of the Vulnerable Software and Affected Versions: JEvents component for Joomla versions prior to 3.6.88 JEvents component for Joomla versions prior to 3.6.82.1 Description: A SQL injection vulnerability in the JEvents component for Joomla was discovered, allowing unauthorized access to data...
CVE-2015-7340
JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action...
Sql injection
JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action...
CVE-2015-7340
The CVE-2015-7340 entry concerns the JEvents Joomla Component prior to version 3.4.0 RC6, which is reported to be vulnerable to SQL Injection via the evid parameter in the Manage Events action. The vulnerability stems from an input vector in the Manage Events workflow that allows an attacker to i...
CVE-2015-7340
JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action...
Jevents 3.4.49 Various
Jevents 3.4.49 Various UpdateNotice URL https://www.jevents.net/blog/jevents-3-4-50-released-all-users-should-upgrade...
Joomla JEvents 3.4.47 SQL Injection
Exploit Title : Joomla JEvents Components 3.4.47 SQL Injection Author Discovered By : KingSkrupellos Team : Cyberizm Digital Security Army Date : 31/01/2019 Vendor Homepage : jevents.net Software Download Link : jevents.net/download-area/jevents Software Information Link :...
JEvents, pre 3.2.20
Extension: JEvents from jevents.net Vulnerability: SQL injection Versions affected prior to 3.2.20 Resolution: update to 3.2.20 - JEvents 3.4.0RC6 is also available for Joomla 3.4+ which fixes the same security issue. Update notice URL: https://www.jevents.net/component/zoo/item/jevents-33...
JEvents pre 3.1.37
Version 3.1.37 eliminates a low risk theoretical XSS exploit and SQL injection exploit. UpdateNoticeURL https://www.jevents.net/jevnews/234-jevents-32 ttweetfsubscribe...
Joomla! JEvents Component SQLi Vulnerability
Joomla! with JEvents component is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Joomla JEvents 1.5.0 SQL Injection
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Author: Ur0b0r0x Tiwtte: @Ur0b0r0x Email: [email protected] Line: GreyHat Home: ur0b0r0x.blogspot.com Exploit Title: Joomla Component - JEvents 1.5.0 Sql Injectio...