Description

SQL injection vulnerability in the EQ Event Calendar component for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter to eqfullevent.

Remediation

References

CVE-2015-4654

Related Vulnerabilities

WordPress Plugin Woody ad snippets-Insert Header Footer Code, AdSense Ads PHP Code Injection (1.3)

WordPress Plugin Product Feed on WooCommerce for Google, Awin, Shareasale, Bing, and More SQL Injection (3.3.0.3)

WordPress Plugin Theme Tweaker Cross-Site Request Forgery (5.20)

Pega Infinity CVE-2021-27653 Vulnerability (CVE-2021-27653)

WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Security Bypass (3.1.0)

Severity

High

Tags

Missing Update Known Vulnerabilities CWE-138 CVE-2015-4654