Skip to main content
← All vulnerabilities
CVE-2010-4993

SQL injection vulnerability in the eventcal (com_eventcal) component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL comm

Published
Last modified
published
Not listed in CISA KEV
1 on Exploit-DB

Summary

SQL injection vulnerability in the eventcal (com_eventcal) component 1.6.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the Itemid parameter to index.php.

Timeline

  1. Public exploit on Exploit-DB

    EDB-14187

  2. CVE published
  3. Record last updated

Affected versions

  • n/a n/a

    Version range not reported

References 6

securityreason.com

packetstormsecurity.org

exchange.xforce.ibmcloud.com

securityfocus.com

Exploit-DB