Joomla Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability - CVE-2015-4654 - Vulnerability Database
Joomla Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability - CVE-2015-4654
High
Reference:
CVE-2015-4654
Title:
Joomla Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability
Overview:
SQL injection vulnerability in the EQ Event Calendar component for Joomla allows remote attackers to execute arbitrary SQL commands via the id parameter to eqfullevent.