CVE-2010-4993

CVE-2010-4993 is a confirmed SQL injection in the Joomla! eventcal (com_eventcal) component version 1.6.4. The vulnerability arises in the Itemid parameter sent to index.php, enabling remote attackers to inject arbitrary SQL commands. Affected product: Joomla! environment with com_eventcal 1.6.4....