5 matches found
Sql injection
JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action...
CVE-2015-7340
JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action...
CVE-2015-7340
JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action...
PT-2020-7884
Name of the Vulnerable Software and Affected Versions: JEvents Joomla Component versions prior to 3.4.0 RC6 Description: The issue is related to SQL Injection via the evid variable in a Manage Events action. This allows for potential exploitation. Recommendations: For versions prior to 3.4.0 RC6,...
CVE-2015-7340: Improper Neutralization of Special Elements used in an SQL Command
JEvents Joomla Component before 3.4.0 RC6 has SQL Injection via evid in a Manage Events action...