CVE-2010-0635

https://notcve.org/view.php?id=CVE-2010-0635

12 Feb 2010 — SQL injection vulnerability in the plgSearchEventsearch::onSearch method in eventsearch.php in the JEvents Search plugin 1.5 through 1.5.3 for Joomla! allows remote attackers to execute arbitrary SQL commands via unspecified vectors. NOTE: some of these details are obtained from third party information. Vulnerabilidad de inyección SQL en el método plgSearchEventsearch::onSearch en eventsearch.php en el plugin JEvents Search v1.5 a la v1.5.3 para Joomla!, permite a atacantes remotos ejecutar comandos SQL de ... • http://secunia.com/advisories/38404 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •