QwikSec

Security Database

CVE

CWE

Training

CVE-2010-4795

Published: Apr 27, 2011

Modified: Aug 7, 2024

PUBLISHED

Description

SQL injection vulnerability in the JS Calendar (com_jscalendar) component 1.5.1 and 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the ev_id parameter in a details action to index.php. NOTE: some of these details are obtained from third party information.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

vdb-entry

x_refsource_BID

jscalendar-index-sql-injection(62379)

vdb-entry

x_refsource_XF

third-party-advisory

x_refsource_SREASON

http://adv.salvatorefresta.net/JS_Calendar_1.5.1_Joomla_Component_Multiple_Remote_Vulnerabilities-09102010.txt

x_refsource_MISC

third-party-advisory

x_refsource_SECUNIA

exploit

x_refsource_EXPLOIT-DB

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.