CVE-2018-6398
CRITICAL
9.8
CVSS Severity Score
Vulnerability Description
SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load action.
Affected Platforms (CPE)
📦
Joomlacalendars
Back to CVE Browser
Related Vulnerabilities
CVE-2008-467310.0
PHP remote file inclusion vulnerability in panel/common/theme/default/header_setup.php in WebBiscuits Software Events Calendar 1.1...
CVE-2021-420779.8
PHP Event Calendar before 2021-09-03 allows SQL injection, as demonstrated by the /server/ajax/user_manager.php username parameter...
CVE-2018-53159.8
The Wachipi WP Events Calendar plugin 1.0 for WordPress has SQL Injection via the event_id parameter to event.php.
CVE-2021-249439.8
The Registrations for the Events Calendar WordPress plugin before 2.7.6 does not sanitise and escape the event_id in the rtec_send...