Joomlacalendars

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Joomlacalendars records in CISA KEV

No Joomlacalendars vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2018-04714 CVE-2018-6398 · GHSA-p6rf-5qp9-3rrw

MEDIUM 47

SQL Injection exists in the CP Event Calendar 3.0.1 component for Joomla! via the id parameter in a task=load action.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02652 Published 2018-01-30 No fix listed CWE-89

TI-2018-04713 CVE-2018-6397 · GHSA-gx2j-r43g-9jm7

MEDIUM 47

Directory Traversal exists in the Picture Calendar 3.1.4 component for Joomla! via the list.php folder parameter.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.1195 Published 2018-01-30 No fix listed CWE-22

TI-2018-04711 CVE-2018-6395 · GHSA-h62f-x8gw-m9g4

MEDIUM 47

SQL Injection exists in the Visual Calendar 3.1.3 component for Joomla! via the id parameter in a view=load action.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02652 Published 2018-01-30 No fix listed CWE-89