Vulnerabilities > Joomlacalendars

DATE CVE VULNERABILITY TITLE RISK
2018-01-30 CVE-2018-6398 SQL Injection vulnerability in Joomlacalendars Event Calendar 3.0.1
SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load action.
network
low complexity
joomlacalendars CWE-89
critical
9.8
2018-01-30 CVE-2018-6397 Path Traversal vulnerability in Joomlacalendars Picture Calendar 3.1.4
Directory Traversal exists in the Picture Calendar 3.1.4 component for Joomla! via the list.php folder parameter.
network
low complexity
joomlacalendars CWE-22
7.5
2018-01-30 CVE-2018-6395 SQL Injection vulnerability in Joomlacalendars Visual Calendar 3.1.3
SQL Injection exists in the Visual Calendar 3.1.3 component for Joomla! via the id parameter in a view=load action.
network
low complexity
joomlacalendars CWE-89
critical
9.8