CVE

Id
47379  
CVE No.
CVE-2010-4795  
Status
Candidate  
Description
SQL injection vulnerability in the JS Calendar (com_jscalendar) component 1.5.1 and 1.5.4 for Joomla! allows remote attackers to execute arbitrary SQL commands via the ev_id parameter in a details action to index.php. NOTE: some of these details are obtained from third party information.  
Phase
Assigned (20110426)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
517393 47379 CVE-2010-4795 EXPLOIT-DB:15224  View
517394 47379 CVE-2010-4795 URL:http://www.exploit-db.com/exploits/15224  View
517395 47379 CVE-2010-4795 MISC:http://adv.salvatorefresta.net/JS_Calendar_1.5.1_Joomla_Component_Multiple_Remote_Vulnerabilities-09102010.txt  View
517396 47379 CVE-2010-4795 BID:43902  View
517397 47379 CVE-2010-4795 URL:http://www.securityfocus.com/bid/43902  View
517398 47379 CVE-2010-4795 SECUNIA:41766  View
517399 47379 CVE-2010-4795 URL:http://secunia.com/advisories/41766  View
517400 47379 CVE-2010-4795 SREASON:8223  View
517401 47379 CVE-2010-4795 URL:http://securityreason.com/securityalert/8223  View
517402 47379 CVE-2010-4795 XF:jscalendar-index-sql-injection(62379)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33768 JVNDB-2011-004010 Chipmunk Pwngame における SQL インジェクションの脆弱性 Chipmunk Pwngame には、magic_quotes_gpc が無効にされた際、SQL インジェクションの脆弱性が存在します。 CVE-2010-4799 47379 6.8 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004010.html  View