CVE-2010-2513

CVE-2010-2513 describes a SQL injection in the Joomla! component JE Ajax Event Calendar (com_jeajaxeventcalendar) version 1.0.5. The vulnerability allows remote attackers to execute arbitrary SQL commands by supplying a crafted value to the view parameter in index.php. This is a server-side datab...

CVE-2010-4365

CVE-2010-4365 concerns an SQL injection in the Joomla! extension JE Ajax Event Calendar (com_jeajaxeventcalendar). The vulnerability stems from unsafely handling the event_id parameter in the alleventlist_more action to index.php, allowing remote attackers to craft input that could modify or disc...

CVE-2010-2129

CVE-2010-2129 is a directory traversal vulnerability in the Joomla! extension JE Ajax Event Calendar (com_jeajaxeventcalendar) versions 1.0.1 and 1.0.3, allowing remote attackers to read arbitrary files by supplying a .. in the view parameter to index.php. The issue arises from insufficient input...