CVSS: 9.8EPSS: 0%CPEs: 3EXPL: 4CVE-2010-4795 – Joomla! Component JS Calendar 1.5.1 - Multiple Vulnerabilities
https://notcve.org/view.php?id=CVE-2010-4795
27 Apr 2011 — SQL injection vulnerability in the JS Calendar (com_jscalendar) component 1.5.1 and 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the ev_id parameter in a details action to index.php. NOTE: some of these details are obtained from third party information. Vulnerabilidad de inyección SQL en el componente JS Calendar (com_jscalendar) v1.5.1 y v1.5.4 para Joomla! permite a atacantes remotos ejecutar comandos SQL a través del parámetro EV_ID en una acción de información a index.... • https://www.exploit-db.com/exploits/15224 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 6.1EPSS: 0%CPEs: 3EXPL: 4CVE-2010-4794 – Joomla! Component JS Calendar 1.5.1 - Multiple Vulnerabilities
https://notcve.org/view.php?id=CVE-2010-4794
27 Apr 2011 — Multiple cross-site scripting (XSS) vulnerabilities in the JoomlaSeller JS Calendar (com_jscalendar) component 1.5.1 and 1.5.4 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the (1) month and (2) year parameters in a jscalendar action to index.php. NOTE: some of these details are obtained from third party information. Múltiples vulnerabilidades de ejecución de secuencias de comandos en sitios cruzados en el componente JoomlaSeller JS Calendar (com_jscalendar) v1.5.1 y v1.5.4 p... • https://www.exploit-db.com/exploits/15224 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •